Fix KDC choice to send encrypted S4U_X509_USER The KDC's decision to send a PA_S4U_X509_USER entry in encrypted padata has no connection to the client USE_REPLY_KEY_USAGE flag. Only conditionalize on the enctype. https://github.com/krb5/krb5/commit/d4272f3f29ddbd6268c21be73887cd5b20326dd5 Author: Greg Hudson Commit: d4272f3f29ddbd6268c21be73887cd5b20326dd5 Branch: master src/kdc/kdc_util.c | 3 +-- 1 files changed, 1 insertions(+), 2 deletions(-)