From: Karolin Seeger <kseeger@samba.org>
Date: Wed, 21 Feb 2018 09:15:22 +0000 (+0100)
Subject: Revert "s4:kdc: use the strongest possible tgs session key"
X-Git-Tag: samba-4.6.15~48
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=cb60d1c2175c32a4b3879d2c9e39a4760d17f78a;p=thirdparty%2Fsamba.git

Revert "s4:kdc: use the strongest possible tgs session key"

This reverts commit 9fdf175905efde803941a5876ce7e060013fc9a0.
---

diff --git a/source4/kdc/kdc-heimdal.c b/source4/kdc/kdc-heimdal.c
index acc19df8383..061296a4f40 100644
--- a/source4/kdc/kdc-heimdal.c
+++ b/source4/kdc/kdc-heimdal.c
@@ -373,14 +373,10 @@ static void kdc_task_init(struct task_server *task)
 	 *
 	 * The old behavior in the _kdc_get_preferred_key()
 	 * function is use_strongest_server_key=TRUE.
-	 *
-	 * We actually want the behavior of
-	 * tgs_use_strongest_session_key=TRUE,
-	 * see https://bugzilla.samba.org/show_bug.cgi?id=13135
 	 */
 	kdc_config->as_use_strongest_session_key = false;
 	kdc_config->preauth_use_strongest_session_key = false;
-	kdc_config->tgs_use_strongest_session_key = true;
+	kdc_config->tgs_use_strongest_session_key = false;
 	kdc_config->use_strongest_server_key = true;
 
 	kdc_config->autodetect_referrals = false;