summaryrefslogtreecommitdiffstats
path: root/src/config-files
diff options
context:
space:
mode:
authorTom Yu <tlyu@mit.edu>2001-04-04 22:31:31 +0000
committerTom Yu <tlyu@mit.edu>2001-04-04 22:31:31 +0000
commit7335d6ddadb9d2d15c9718a593200f081e6327cc (patch)
tree60900a492d79b5f7528f93ecc7c22703a9462db9 /src/config-files
parent715a67e80b96feda5c585533be1d54298fc318ed (diff)
downloadkrb5-7335d6ddadb9d2d15c9718a593200f081e6327cc.tar.gz
krb5-7335d6ddadb9d2d15c9718a593200f081e6327cc.tar.xz
krb5-7335d6ddadb9d2d15c9718a593200f081e6327cc.zip
* krb5.conf.M: Update description of safe_checksum_type for recent
changes. [pullup from krb5-1-2-2-branch] git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@13143 dc483132-0cff-0310-8789-dd5450dbe970
Diffstat (limited to 'src/config-files')
-rw-r--r--src/config-files/ChangeLog5
-rw-r--r--src/config-files/krb5.conf.M13
2 files changed, 13 insertions, 5 deletions
diff --git a/src/config-files/ChangeLog b/src/config-files/ChangeLog
index 7a3f1e0a1f..9dc91f27bc 100644
--- a/src/config-files/ChangeLog
+++ b/src/config-files/ChangeLog
@@ -1,3 +1,8 @@
+2001-04-04 Tom Yu <tlyu@mit.edu>
+
+ * krb5.conf.M: Update description of safe_checksum_type for recent
+ changes. [pullup from krb5-1-2-2-branch]
+
2000-05-31 Ken Raeburn <raeburn@mit.edu>
* krb5.conf.M: Added description of v4_realm from Booker
diff --git a/src/config-files/krb5.conf.M b/src/config-files/krb5.conf.M
index 1b48e57e3a..3ca1a6adee 100644
--- a/src/config-files/krb5.conf.M
+++ b/src/config-files/krb5.conf.M
@@ -136,15 +136,18 @@ earlier.
This allows you to set the checksum type used in the authenticator of
KRB_AP_REQ messages. The default value for this type is
CKSUMTYPE_RSA_MD5. For compatibility with applications linked against
-DCE Kerberos libraries, use a value of 2 to use the CKSUMTYPE_RSA_MD4
-instead. This applies to DCE 1.1 and earlier.
+DCE version 1.1 or earlier Kerberos libraries, use a value of 2 to use
+the CKSUMTYPE_RSA_MD4
+instead.
.IP safe_checksum_type
-This allows you to set the keyed-checksum type used in KRB_SAFE
+This allows you to set the preferred keyed-checksum type for use in KRB_SAFE
messages. The default value for this type is CKSUMTYPE_RSA_MD5_DES.
-For compatibility with applications linked against DCE Kerberos
+For compatibility with applications linked against DCE version 1.1 or
+earlier Kerberos
libraries, use a value of 3 to use the CKSUMTYPE_RSA_MD4_DES
-instead. This applies to DCE 1.1 and earlier.
+instead. This field is ignored when its value is incompatible with
+the session key type.
.IP ccache_type
User this parameter on systems which are DCE clients, to specify the