From: Ken Raeburn <raeburn@mit.edu>
Date: Sat, 31 May 2003 04:06:02 +0000 (+0000)
Subject: More visible notes on incompleteness of AES support.
X-Git-Tag: krb5-1.4-beta1~895
X-Git-Url: http://git.tremily.us/?a=commitdiff_plain;h=cf16ab933c9966bfb2b90a3f234feec0900e389f;p=krb5.git

More visible notes on incompleteness of AES support.
Note master key type change.
Note default lifetime changes.

ticket: 1190
status: open

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15540 dc483132-0cff-0310-8789-dd5450dbe970
---

diff --git a/README b/README
index 60328f0a1..cefd2807c 100644
--- a/README
+++ b/README
@@ -95,7 +95,10 @@ Notes, Major Changes, and Known Bugs for 1.3
   can be used to help the compiler and linker find the installed
   packages; see the build documentation for details.
 
-* The AES cryptosystem has been implemented.
+* The AES cryptosystem has been implemented.  However, support in the
+  Kerberos GSSAPI mechanism has not been written (or even fully
+  specified), so it's not fully enabled.  See the documentation for
+  details.
 
 Major changes listed by ticket ID
 ---------------------------------
@@ -125,6 +128,14 @@ Major changes listed by ticket ID
 
 * [1189, 1251] The KfM krb4 library source base has been merged.
 
+* [1190] The default KDC master key type is now triple-DES.  KDCs
+  being updated may need their config files updated if they are not
+  already specifying the master key type.
+
+* [1190] The default ticket lifetime and default maximum renewable
+  ticket lifetime have been extended to one day and one week,
+  respectively.
+
 * [1191] A new script, k5srvutil, may be used to manipulate keytabs in
   ways similar to the krb4 ksrvutil utility.