From 7335d6ddadb9d2d15c9718a593200f081e6327cc Mon Sep 17 00:00:00 2001 From: Tom Yu Date: Wed, 4 Apr 2001 22:31:31 +0000 Subject: [PATCH] * krb5.conf.M: Update description of safe_checksum_type for recent changes. [pullup from krb5-1-2-2-branch] git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13143 dc483132-0cff-0310-8789-dd5450dbe970 --- src/config-files/ChangeLog | 5 +++++ src/config-files/krb5.conf.M | 13 ++++++++----- 2 files changed, 13 insertions(+), 5 deletions(-) diff --git a/src/config-files/ChangeLog b/src/config-files/ChangeLog index 7a3f1e0a1..9dc91f27b 100644 --- a/src/config-files/ChangeLog +++ b/src/config-files/ChangeLog @@ -1,3 +1,8 @@ +2001-04-04 Tom Yu + + * krb5.conf.M: Update description of safe_checksum_type for recent + changes. [pullup from krb5-1-2-2-branch] + 2000-05-31 Ken Raeburn * krb5.conf.M: Added description of v4_realm from Booker diff --git a/src/config-files/krb5.conf.M b/src/config-files/krb5.conf.M index 1b48e57e3..3ca1a6ade 100644 --- a/src/config-files/krb5.conf.M +++ b/src/config-files/krb5.conf.M @@ -136,15 +136,18 @@ earlier. This allows you to set the checksum type used in the authenticator of KRB_AP_REQ messages. The default value for this type is CKSUMTYPE_RSA_MD5. For compatibility with applications linked against -DCE Kerberos libraries, use a value of 2 to use the CKSUMTYPE_RSA_MD4 -instead. This applies to DCE 1.1 and earlier. +DCE version 1.1 or earlier Kerberos libraries, use a value of 2 to use +the CKSUMTYPE_RSA_MD4 +instead. .IP safe_checksum_type -This allows you to set the keyed-checksum type used in KRB_SAFE +This allows you to set the preferred keyed-checksum type for use in KRB_SAFE messages. The default value for this type is CKSUMTYPE_RSA_MD5_DES. -For compatibility with applications linked against DCE Kerberos +For compatibility with applications linked against DCE version 1.1 or +earlier Kerberos libraries, use a value of 3 to use the CKSUMTYPE_RSA_MD4_DES -instead. This applies to DCE 1.1 and earlier. +instead. This field is ignored when its value is incompatible with +the session key type. .IP ccache_type User this parameter on systems which are DCE clients, to specify the -- 2.26.2