diff options
| author | Sam Hartman <hartmans@mit.edu> | 2009-04-03 03:33:01 +0000 |
|---|---|---|
| committer | Sam Hartman <hartmans@mit.edu> | 2009-04-03 03:33:01 +0000 |
| commit | 6d48a7deaeed3dcb5dce55d8e9730c47512a904e (patch) | |
| tree | 5bcc45ebabcfab7ec0993fb33f79f9093a983061 /src/config-files | |
| parent | d44144bc3c86cd2e0b9dbe74f0241905201ddd23 (diff) | |
| download | krb5-6d48a7deaeed3dcb5dce55d8e9730c47512a904e.tar.gz krb5-6d48a7deaeed3dcb5dce55d8e9730c47512a904e.tar.xz krb5-6d48a7deaeed3dcb5dce55d8e9730c47512a904e.zip | |
Unfortunately, pre-1.7 krshd fails to support keyed checksums because
it uses the wrong API and wrong key usage. So, if the auth_context
has an explicit checksum type set, then respect that. kcmd sets such
a checksum type. Also, because other applications may have the same
problem, allow the config file variable if set to override the default
checksum.
* kcmd.c: Force use of rsa_md5
* init_ctx.c: do not default to md5
* mk_req_ext.c: allow auth_context to override
ticket: 1624
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@22160 dc483132-0cff-0310-8789-dd5450dbe970
Diffstat (limited to 'src/config-files')
| -rw-r--r-- | src/config-files/krb5.conf.M | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/src/config-files/krb5.conf.M b/src/config-files/krb5.conf.M index 10b1792e87..2f2fbb2392 100644 --- a/src/config-files/krb5.conf.M +++ b/src/config-files/krb5.conf.M @@ -147,7 +147,7 @@ earlier. This value is only used for DES keys; other keys use the preferred checksum type for those keys. .IP ap_req_checksum_type -This obsolete variable is not used. +If set this variable controls what ap-req checksum will be used in authenticators. This variable should be unset so the appropriate checksum for the encryption key in use will be used. This can be set if backward compatibility requires a specific checksum type. .IP safe_checksum_type This allows you to set the preferred keyed-checksum type for use in KRB_SAFE |