From 3a3c53327a44cb875becc070c79f0e14be19f56c Mon Sep 17 00:00:00 2001 From: Andrew Bartlett Date: Mon, 28 Nov 2005 07:59:46 +0000 Subject: r11940: Love has clarified why this code does what it does. Andrew Bartlett (This used to be commit 9b3dedbc0bb12897a8f9bd4ec864de26b3835981) --- source4/heimdal/kdc/kerberos5.c | 6 ++++++ 1 file changed, 6 insertions(+) (limited to 'source4/heimdal') diff --git a/source4/heimdal/kdc/kerberos5.c b/source4/heimdal/kdc/kerberos5.c index ccfa35b638..565c7478f9 100644 --- a/source4/heimdal/kdc/kerberos5.c +++ b/source4/heimdal/kdc/kerberos5.c @@ -1099,6 +1099,12 @@ _kdc_as_rep(krb5_context context, pa->padata_value.data = NULL; #endif + /* RFC4120 requires: + - If the client only knows about old enctypes, then send both info replies + (we send 'info' first in the list). + - If the client is 'modern', because it knows about 'new' enc types, then + only send the 'info2' reply. + */ /* XXX check ret */ if (only_older_enctype_p(req)) ret = get_pa_etype_info(context, config, &method_data, &client->entry, -- cgit