summaryrefslogtreecommitdiff
path: root/source4/heimdal/kdc/kerberos5.c
diff options
context:
space:
mode:
authorAndrew Bartlett <abartlet@samba.org>2005-11-28 07:59:46 +0000
committerGerald (Jerry) Carter <jerry@samba.org>2007-10-10 13:46:49 -0500
commit3a3c53327a44cb875becc070c79f0e14be19f56c (patch)
treee6baf59c698d43a4fc3954bba42d5511a50dbdf0 /source4/heimdal/kdc/kerberos5.c
parent68049cfac3bed210aaf5195e7ff749709e4cd1f3 (diff)
downloadsamba-3a3c53327a44cb875becc070c79f0e14be19f56c.tar.gz
samba-3a3c53327a44cb875becc070c79f0e14be19f56c.tar.bz2
samba-3a3c53327a44cb875becc070c79f0e14be19f56c.zip
r11940: Love has clarified why this code does what it does.
Andrew Bartlett (This used to be commit 9b3dedbc0bb12897a8f9bd4ec864de26b3835981)
Diffstat (limited to 'source4/heimdal/kdc/kerberos5.c')
-rw-r--r--source4/heimdal/kdc/kerberos5.c6
1 files changed, 6 insertions, 0 deletions
diff --git a/source4/heimdal/kdc/kerberos5.c b/source4/heimdal/kdc/kerberos5.c
index ccfa35b638..565c7478f9 100644
--- a/source4/heimdal/kdc/kerberos5.c
+++ b/source4/heimdal/kdc/kerberos5.c
@@ -1099,6 +1099,12 @@ _kdc_as_rep(krb5_context context,
pa->padata_value.data = NULL;
#endif
+ /* RFC4120 requires:
+ - If the client only knows about old enctypes, then send both info replies
+ (we send 'info' first in the list).
+ - If the client is 'modern', because it knows about 'new' enc types, then
+ only send the 'info2' reply.
+ */
/* XXX check ret */
if (only_older_enctype_p(req))
ret = get_pa_etype_info(context, config, &method_data, &client->entry,