More visible notes on incompleteness of AES support.

Note master key type change.
Note default lifetime changes.

ticket: 1190
status: open

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15540 dc483132-0cff-0310-8789-dd5450dbe970

diff --git a/README b/README
index 60328f0a172baf6f74f3f07a53e71044fb51c178..cefd2807cec73e8705831eeafafa3361d83370c8 100644 (file)
--- a/README
+++ b/README
@@ -95,7 +95,10 @@ Notes, Major Changes, and Known Bugs for 1.3
   can be used to help the compiler and linker find the installed
   packages; see the build documentation for details.
 
-* The AES cryptosystem has been implemented.
+* The AES cryptosystem has been implemented.  However, support in the
+  Kerberos GSSAPI mechanism has not been written (or even fully
+  specified), so it's not fully enabled.  See the documentation for
+  details.
 
 Major changes listed by ticket ID
 ---------------------------------
@@ -125,6 +128,14 @@ Major changes listed by ticket ID
 
 * [1189, 1251] The KfM krb4 library source base has been merged.
 
+* [1190] The default KDC master key type is now triple-DES.  KDCs
+  being updated may need their config files updated if they are not
+  already specifying the master key type.
+
+* [1190] The default ticket lifetime and default maximum renewable
+  ticket lifetime have been extended to one day and one week,
+  respectively.
+
 * [1191] A new script, k5srvutil, may be used to manipulate keytabs in
   ways similar to the krb4 ksrvutil utility.