[Subsequent messages containing key data have not been sent to the mailinglist.]
Hi Greg,
thank you very much. Now, I have a better understanding of the problem.
I started to analyze the key data with an ASN.1 decoder and could identify
the differences in the optional salt sequence. Patching the
If you decide to go with patching the KDC, the candidate fixes are here:
https://github.com/krb5/krb5/pull/129
These changes should get pushed to master within a week or so, and
will eventually make their way into 1.12 and probably 1.11 patch releases.
___