From: Luke Howard <lukeh@padl.com>
Date: Sun, 12 Sep 2010 02:36:49 +0000 (+0200)
Subject: notes
X-Git-Url: http://www.project-moonshot.org/gitweb/?a=commitdiff_plain;ds=sidebyside;h=1ff2cfc44b5ce72236f34fc18e25cbf864f0bf0a;p=cyrus-sasl.git

notes
---

diff --git a/mech_eap/util_krb.c b/mech_eap/util_krb.c
index ccce938..75fe0b3 100644
--- a/mech_eap/util_krb.c
+++ b/mech_eap/util_krb.c
@@ -201,6 +201,11 @@ rfc3961ChecksumTypeForKey(OM_uint32 *minor,
 
     memset(&cksum, 0, sizeof(cksum));
 
+    /*
+     * This is a complete hack but it's the only way to work with
+     * MIT Kerberos pre-1.9 without using private API, as it does
+     * not support passing in zero as the checksum type.
+     */
     *minor = krb5_c_make_checksum(krbContext, 0, key, 0, &data, &cksum);
     if (*minor != 0)
         return GSS_S_FAILURE;