Re: Problems parsing old krbPrincipalKey attributes from LDAP backend

2014-05-24 Thread Frank Steinberg
[Subsequent messages containing key data have not been sent to the mailinglist.] Hi Greg, thank you very much. Now, I have a better understanding of the problem. I started to analyze the key data with an ASN.1 decoder and could identify the differences in the optional salt sequence. Patching the

Re: Problems parsing old krbPrincipalKey attributes from LDAP backend

2014-05-24 Thread Greg Hudson
If you decide to go with patching the KDC, the candidate fixes are here: https://github.com/krb5/krb5/pull/129 These changes should get pushed to master within a week or so, and will eventually make their way into 1.12 and probably 1.11 patch releases. ___