lib/krb5_wrap: request enc_types in the correct order (bug #9272)
authorStefan Metzmacher <metze@samba.org>
Mon, 22 Oct 2012 11:47:48 +0000 (13:47 +0200)
committerKarolin Seeger <kseeger@samba.org>
Mon, 12 Nov 2012 08:07:23 +0000 (09:07 +0100)
commit5fbedc11e685684e037d23f75f42ec234c6d08f0
tree201f14c03b1b5d5bb0409081ec04508b6742bc76
parent789d801b69934e34ac293342516fa4e1cc68b4fa
lib/krb5_wrap: request enc_types in the correct order (bug #9272)

aes256-cts-hmac-sha1-96 and aes128-cts-hmac-sha1-96
should have a higher priority than arcfour-hmac-md5,
otherwise the KDC still gives us arcfour-hmac-md5 session keys.

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Michael Adam <obnox@samba.org>
(similar to commit 24f3f87706329e6e280dc6be6d025e997d46c910)

The last 3 patches address bug #9272 - net ads join does not provide AES keys in
host keytab.
source3/libsmb/clikrb5.c