From ecfd6a789427c0d101dd218440786fb6606b7df5 Mon Sep 17 00:00:00 2001 From: Ken Raeburn Date: Sat, 4 May 1996 00:22:56 +0000 Subject: [PATCH] Tue Apr 2 22:31:48 1996 Mark Eichin * krb5.conf.M, krb5.conf: add default_tkt_enctypes. Wed Mar 27 22:44:36 1996 Mark Eichin * krb5.conf, kdc.conf: specify des-cbc-crc as the only valid enctype (but permit normal, v4, norealm, onlyrealm, and afs3 salttypes.) git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7892 dc483132-0cff-0310-8789-dd5450dbe970 --- src/config-files/ChangeLog | 10 ++++++++++ src/config-files/kdc.conf | 4 ++-- src/config-files/krb5.conf | 3 ++- src/config-files/krb5.conf.M | 4 ++++ 4 files changed, 18 insertions(+), 3 deletions(-) diff --git a/src/config-files/ChangeLog b/src/config-files/ChangeLog index 868e403f5..655ff7061 100644 --- a/src/config-files/ChangeLog +++ b/src/config-files/ChangeLog @@ -1,3 +1,13 @@ +Tue Apr 2 22:31:48 1996 Mark Eichin + + * krb5.conf.M, krb5.conf: add default_tkt_enctypes. + +Wed Mar 27 22:44:36 1996 Mark Eichin + + * krb5.conf, kdc.conf: specify des-cbc-crc as the only valid + enctype (but permit normal, v4, norealm, onlyrealm, and afs3 + salttypes.) + Tue Oct 3 17:57:32 1995 Mark Eichin * krb5.conf[libdefaults]: add krb4_config, krb4_realms. diff --git a/src/config-files/kdc.conf b/src/config-files/kdc.conf index 35e72aa8b..90ca92168 100644 --- a/src/config-files/kdc.conf +++ b/src/config-files/kdc.conf @@ -9,6 +9,6 @@ kdc_ports = 750,88 max_life = 10h 0m 0s max_renewable_life = 7d 0h 0m 0s - master_key_type = des3-cbc-md5 - supported_enctypes = des3-cbc-md5:normal des-cbc-crc:normal des-cbc-crc:v4 + master_key_type = des-cbc-crc + supported_enctypes = des-cbc-crc:normal des:normal des:v4 des:norealm des:onlyrealm des:afs3 } diff --git a/src/config-files/krb5.conf b/src/config-files/krb5.conf index 1dd62af4e..8d479e03f 100644 --- a/src/config-files/krb5.conf +++ b/src/config-files/krb5.conf @@ -1,7 +1,8 @@ [libdefaults] ticket_lifetime = 600 default_realm = ATHENA.MIT.EDU - default_tgs_enctypes = des3-cbc-md5 des-cbc-md5 des-cbc-crc + default_tgs_enctypes = des-cbc-crc + default_tkt_enctypes = des-cbc-crc krb4_config = /usr/kerberos/lib/krb.conf krb4_realms = /usr/kerberos/lib/krb.realms diff --git a/src/config-files/krb5.conf.M b/src/config-files/krb5.conf.M index 5683f4d38..bd1c957da 100644 --- a/src/config-files/krb5.conf.M +++ b/src/config-files/krb5.conf.M @@ -102,6 +102,10 @@ This relation identifies the supported list of session key encryption types that should be returned by the KDC. The list may be delimited with commas or whitespace. +.IP default_tkt_enctypes +This relation identifies the supported list of session key encryption +types that should be requested by the client, in the same format. + .IP clockskew This relation sets the maximum allowable amount of clockskew in seconds that the library will tolerate before assuming that a Kerberos -- 2.26.2