diff options
| author | Zhanna Tsitkov <tsitkova@mit.edu> | 2012-08-22 13:05:25 -0400 |
|---|---|---|
| committer | Zhanna Tsitkov <tsitkova@mit.edu> | 2012-08-22 13:05:25 -0400 |
| commit | bbe2600c832bf23c208da30b5f702274bcb08fb1 (patch) | |
| tree | da9548d75ae52ae3d0e67e54d099609e08986a0a /doc | |
| parent | 9f578f00e2b90602e9a066ae918d4b4e23690362 (diff) | |
| download | krb5-bbe2600c832bf23c208da30b5f702274bcb08fb1.tar.gz krb5-bbe2600c832bf23c208da30b5f702274bcb08fb1.tar.xz krb5-bbe2600c832bf23c208da30b5f702274bcb08fb1.zip | |
Document preference order of enctypes in krb5.conf
Diffstat (limited to 'doc')
| -rw-r--r-- | doc/rst_source/krb_admins/conf_files/krb5_conf.rst | 8 |
1 files changed, 5 insertions, 3 deletions
diff --git a/doc/rst_source/krb_admins/conf_files/krb5_conf.rst b/doc/rst_source/krb_admins/conf_files/krb5_conf.rst index a790caa6e..996f93bc7 100644 --- a/doc/rst_source/krb_admins/conf_files/krb5_conf.rst +++ b/doc/rst_source/krb_admins/conf_files/krb5_conf.rst @@ -157,8 +157,9 @@ The libdefaults section may contain any of the following relations: **default_tgs_enctypes** Identifies the supported list of session key encryption types that - should be returned by the KDC. The list may be delimited with - commas or whitespace. See :ref:`Encryption_and_salt_types` in + should be returned by the KDC, in order of preference from + highest to lowest. The list may be delimited with commas or + whitespace. See :ref:`Encryption_and_salt_types` in :ref:`kdc.conf(5)` for a list of the accepted values for this tag. The default value is |defetypes|, but single-DES encryption types will be implicitly removed from this list if the value of @@ -166,7 +167,8 @@ The libdefaults section may contain any of the following relations: **default_tkt_enctypes** Identifies the supported list of session key encryption types that - should be requested by the client. The format is the same as for + should be requested by the client, in order of preference from + highest to lowest. The format is the same as for default_tgs_enctypes. The default value for this tag is |defetypes|, but single-DES encryption types will be implicitly removed from this list if the value of **allow_weak_crypto** is |