On Thu, Oct 05, 2017 at 12:06:51PM -0400, Greg Hudson wrote: > If my theory is correct, the KDC is sending unhelpful e_text and/or > Heimdal is too trusting in using the e_text in preference to the string > corresponding to the error code. In this case, concatenating the error > code string with the e_text would produce a better result but not an > ideal one, as "No ENC-TS found" shouldn't appear in the error message at > all.
I concluded it's the KDC, but I couldn't find where that's produced. My theory was that it was _kdc_as_rep(), when it couldn't find a PA, but I didn't see how. Nico --
