From 7acc1a7a2f56627a2f5e4eed2fbfb14a16ecd649 Mon Sep 17 00:00:00 2001 From: Stefan Metzmacher Date: Thu, 14 Jul 2011 21:02:20 +0200 Subject: s4:kdc: set *_strongest_*_key to true to restore the old behavior TODO: check why this is needed. metze Autobuild-User: Stefan Metzmacher Autobuild-Date: Fri Jul 15 12:26:25 CEST 2011 on sn-devel-104 --- source4/kdc/kdc.c | 13 +++++++++++++ 1 file changed, 13 insertions(+) (limited to 'source4') diff --git a/source4/kdc/kdc.c b/source4/kdc/kdc.c index 0723408043..7c00ea9b3f 100644 --- a/source4/kdc/kdc.c +++ b/source4/kdc/kdc.c @@ -964,6 +964,19 @@ static void kdc_task_init(struct task_server *task) } kdc->config->num_db = 1; + /* + * TODO: find out why this is needed in order + * to let make test work. + * + * Without this, we are getting PAC varification + * failures. I guess because the PAC is not signed + * with a arcfour-hmac-md5 key. + */ + kdc->config->as_use_strongest_session_key = true; + kdc->config->preauth_use_strongest_session_key = true; + kdc->config->tgs_use_strongest_session_key = true; + kdc->config->use_strongest_server_key = true; + /* Register hdb-samba4 hooks for use as a keytab */ kdc->base_ctx = talloc_zero(kdc, struct samba_kdc_base_context); -- cgit