AES shouldn't be in KDC default enctype list

Until all services including GSS-based ones can support AES, we don't
want it in the default supported enctypes list on the KDC.

ticket: new
tags: pullup
target_version: 1.3

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15428 dc483132-0cff-0310-8789-dd5450dbe970

diff --git a/doc/ChangeLog b/doc/ChangeLog
index b84a21099486394ca8a535b26e8ac63f97a5567e..786fb2ca2d8eb8d574b22d4f53ba9233f9352c78 100644 (file)
--- a/doc/ChangeLog
+++ b/doc/ChangeLog
@@ -1,3 +1,7 @@
+2003-05-13  Ken Raeburn  <raeburn@mit.edu>
+
+       * definitions.texinfo: Updated DefaultSupportedEnctypes.
+
 2003-05-12  Sam Hartman  <hartmans@mit.edu>
 
        * definitions.texinfo: Default v4 mode is now none

diff --git a/doc/definitions.texinfo b/doc/definitions.texinfo
index 561175c81a8b9fa96082f54e7e79ac4b6d4560da..8cfb8571b18a6ff158172a3ecb058025b3b8f5ad 100644 (file)
--- a/doc/definitions.texinfo
+++ b/doc/definitions.texinfo
@@ -108,7 +108,7 @@ krb5/src/lib/kadm5/alt_prof.c
 @comment line 622
 @set DefaultDefaultPrincipalExpiration 0 
 @comment line 639
-@set DefaultSupportedEnctypes aes256-cts-hmac-sha1:normal des3-hmac-sha1:normal des-cbc-crc:normal
+@set DefaultSupportedEnctypes des3-hmac-sha1:normal des-cbc-crc:normal
 @comment line 705
 
 @ignore

diff --git a/src/lib/kadm5/ChangeLog b/src/lib/kadm5/ChangeLog
index 42e0b8edbde5f75179e00105670eaec918c9eecd..ae0f4405adaa964ed8bfeeba8033e01cdbb8fc81 100644 (file)
--- a/src/lib/kadm5/ChangeLog
+++ b/src/lib/kadm5/ChangeLog
@@ -1,3 +1,8 @@
+2003-05-13  Ken Raeburn  <raeburn@mit.edu>
+
+       * alt_prof.c (kadm5_get_config_params): Remove aes256 from the
+       default supported enctypes list for now.
+
 2003-05-04  Sam Hartman  <hartmans@mit.edu>
 
        * chpass_util_strings.et: Replace reference to ovpasswd with kpasswd

diff --git a/src/lib/kadm5/alt_prof.c b/src/lib/kadm5/alt_prof.c
index e7fe3ef84b84208108f8a0f1703a7121c5939993..4c14c4c04dc9443a952a92e465793fc26b5106f6 100644 (file)
--- a/src/lib/kadm5/alt_prof.c
+++ b/src/lib/kadm5/alt_prof.c
@@ -702,7 +702,7 @@ krb5_error_code kadm5_get_config_params(context, kdcprofile, kdcenv,
         if (aprofile)
              krb5_aprof_get_string(aprofile, hierarchy, TRUE, &svalue);
         if (svalue == NULL)
-            svalue = strdup("aes256-cts-hmac-sha1-96:normal des3-hmac-sha1:normal des-cbc-crc:normal");
+            svalue = strdup("des3-hmac-sha1:normal des-cbc-crc:normal");
 
         params.keysalts = NULL;
         params.num_keysalts = 0;