From caa3f843daf24f0c28f40297c041dc1f97522a8c Mon Sep 17 00:00:00 2001
From: Simo Sorce <ssorce@redhat.com>
Date: Mon, 1 Nov 2010 09:33:14 -0400
Subject: Use strongest keytype for master key

---
 install/share/kdc.conf.template | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'install/share')

diff --git a/install/share/kdc.conf.template b/install/share/kdc.conf.template
index 0a5747831..4a2cca412 100644
--- a/install/share/kdc.conf.template
+++ b/install/share/kdc.conf.template
@@ -4,7 +4,7 @@
 
 [realms]
  $REALM = {
-  master_key_type = des3-hmac-sha1
+  master_key_type = aes256-cts
   supported_enctypes = aes256-cts:normal aes128-cts:normal des3-hmac-sha1:normal arcfour-hmac:normal des-hmac-sha1:normal des-cbc-md5:normal des-cbc-crc:normal des-cbc-crc:v4 des-cbc-crc:afs3
   max_life = 7d
   max_renewable_life = 14d
-- 
cgit