diff options
Diffstat (limited to 'crypto/heimdal/kdc/kerberos5.c')
| -rw-r--r-- | crypto/heimdal/kdc/kerberos5.c | 5 |
1 files changed, 4 insertions, 1 deletions
diff --git a/crypto/heimdal/kdc/kerberos5.c b/crypto/heimdal/kdc/kerberos5.c index c13abb7..ee6baf0 100644 --- a/crypto/heimdal/kdc/kerberos5.c +++ b/crypto/heimdal/kdc/kerberos5.c @@ -1094,7 +1094,10 @@ _kdc_as_rep(krb5_context context, * enctype that an older version of a KDC in the same realm can't * decrypt. */ - ret = _kdc_find_etype(context, config->as_use_strongest_session_key, FALSE, + ret = _kdc_find_etype(context, + krb5_principal_is_krbtgt(context, server_princ) ? + config->tgt_use_strongest_session_key : + config->svc_use_strongest_session_key, FALSE, client, b->etype.val, b->etype.len, &sessionetype, NULL); if (ret) { |
