From 1ff2cfc44b5ce72236f34fc18e25cbf864f0bf0a Mon Sep 17 00:00:00 2001
From: Luke Howard <lukeh@padl.com>
Date: Sun, 12 Sep 2010 04:36:49 +0200
Subject: [PATCH] notes

---
 mech_eap/util_krb.c | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/mech_eap/util_krb.c b/mech_eap/util_krb.c
index ccce938..75fe0b3 100644
--- a/mech_eap/util_krb.c
+++ b/mech_eap/util_krb.c
@@ -201,6 +201,11 @@ rfc3961ChecksumTypeForKey(OM_uint32 *minor,
 
     memset(&cksum, 0, sizeof(cksum));
 
+    /*
+     * This is a complete hack but it's the only way to work with
+     * MIT Kerberos pre-1.9 without using private API, as it does
+     * not support passing in zero as the checksum type.
+     */
     *minor = krb5_c_make_checksum(krbContext, 0, key, 0, &data, &cksum);
     if (*minor != 0)
         return GSS_S_FAILURE;
-- 
2.1.4