Marcus Watts wrote:
> I was hoping you would try different salt types on the principal itself
> (while leaving the enctype as des-cbc-crc). Still, you appear to have
> 2 of 3 necessary conditions to manifest the bug described here:
> http://mailman.mit.edu/pipermail/krb...ry/004246.html
> in which case, this patch applied to the kdc may fix it:
> http://www.umich.edu/~mdw/krb5143-kdcetype.diff
>
> I don't think you ever said what version of kerberos you had installed
> on your server, so I don't know how much trouble you'll have patching that.
> This patch was developed against MIT 1.4.3, but substantially the same
> code (and presumably the same behavior) was still there as of 1.6.1.


Indeed, it still seems to be a problem. We're running 1.6.3.

I'll check out the patch and see where that gets me. Thanks!