On Thu, Aug 04, 2011 at 12:29:30PM -0400, Chris Chiappa wrote: > I tracked the problem down to this commit: > > commit 6df0783c7eef0984b712792a25dd2f5a39f8f337 > Author: Love Hornquist Astrand <l...@apple.com> > Date: Wed Sep 23 00:14:57 2009 -0700 > > Redo client key handling for AS > > Pick the replykey to be the same as the preauth key, this allows > us to delay the picking of client key to when its needed, this > means that we can have a reply keys for PKINIT that is independant > of what keys the client have. > > The attached dif (which is probably totally wrong and shouldn't be > applied anywhere outside of a test instance) to Heimdal 1.5 makes the > kdc work again with no error.
Over 10 years later, anyone know if this is still an issue? If no response, will assume fixed and close this bug report. Otherwise we should open a new upstream bug report. -- Brian May <b...@debian.org>
