Offer multiple etype for TGS-REQ

skelsec · Nov 29, 2024 · a7f2068 · a7f2068
1 parent d2cd8ea
commit a7f2068
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/minikerberos/aioclient.py b/minikerberos/aioclient.py
@@ -398,7 +398,7 @@ async def get_TGS(self, spn_user:KerberosSPN, override_etype = None, is_linux =
 				# but we can request etype 23 here for which all is implemented
 				kdc_req_body['etype'] = [23]
 			else:
-				kdc_req_body['etype'] = [self.kerberos_cipher_type]
+				kdc_req_body['etype'] = [self.kerberos_cipher_type, 23]
 
 		authenticator_data = {}
 		authenticator_data['authenticator-vno'] = krb5_pvno