Subject: | default_tgs_enctypes not used for client TGS enctypes |
Through 1.6, the client uses default_tkt_enctypes for AS requests and
default_tgs_enctypes for TGS requests. But in r21879, when we converted
the code to use KRB5_CONF macros for profile variable names, we made a
typo in krb5_get_tgs_ktypes:
- return(get_profile_etype_list(context, ktypes,
"default_tgs_enctypes",
+ return(get_profile_etype_list(context, ktypes,
KRB5_CONF_DEFAULT_TKT_ENCTYPES,
As a result, since 1.7 we have been using default_tkt_enctypes for TGS
requests.
default_tgs_enctypes for TGS requests. But in r21879, when we converted
the code to use KRB5_CONF macros for profile variable names, we made a
typo in krb5_get_tgs_ktypes:
- return(get_profile_etype_list(context, ktypes,
"default_tgs_enctypes",
+ return(get_profile_etype_list(context, ktypes,
KRB5_CONF_DEFAULT_TKT_ENCTYPES,
As a result, since 1.7 we have been using default_tkt_enctypes for TGS
requests.