summaryrefslogtreecommitdiff
path: root/source4/kdc/kdc.c
diff options
context:
space:
mode:
Diffstat (limited to 'source4/kdc/kdc.c')
-rw-r--r--source4/kdc/kdc.c13
1 files changed, 13 insertions, 0 deletions
diff --git a/source4/kdc/kdc.c b/source4/kdc/kdc.c
index 0723408043..7c00ea9b3f 100644
--- a/source4/kdc/kdc.c
+++ b/source4/kdc/kdc.c
@@ -964,6 +964,19 @@ static void kdc_task_init(struct task_server *task)
}
kdc->config->num_db = 1;
+ /*
+ * TODO: find out why this is needed in order
+ * to let make test work.
+ *
+ * Without this, we are getting PAC varification
+ * failures. I guess because the PAC is not signed
+ * with a arcfour-hmac-md5 key.
+ */
+ kdc->config->as_use_strongest_session_key = true;
+ kdc->config->preauth_use_strongest_session_key = true;
+ kdc->config->tgs_use_strongest_session_key = true;
+ kdc->config->use_strongest_server_key = true;
+
/* Register hdb-samba4 hooks for use as a keytab */
kdc->base_ctx = talloc_zero(kdc, struct samba_kdc_base_context);