diff options
| author | Tom Yu <tlyu@mit.edu> | 2009-01-31 03:57:20 +0000 |
|---|---|---|
| committer | Tom Yu <tlyu@mit.edu> | 2009-01-31 03:57:20 +0000 |
| commit | f70d290faea0ed8a9e41553c56eb673bb1d08cb8 (patch) | |
| tree | 4dace00a9cb4de071e2562805075af38c661a6f3 /src/include | |
| parent | 97bb133745b38dc23375e7fccacd42ce6f993f0e (diff) | |
| download | krb5-f70d290faea0ed8a9e41553c56eb673bb1d08cb8.tar.gz krb5-f70d290faea0ed8a9e41553c56eb673bb1d08cb8.tar.xz krb5-f70d290faea0ed8a9e41553c56eb673bb1d08cb8.zip | |
Default allow_weak_crypto=true for now. Default supported_enctypes to
exclude single-DES enctypes.
ticket: 6353
status: open
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@21851 dc483132-0cff-0310-8789-dd5450dbe970
Diffstat (limited to 'src/include')
| -rw-r--r-- | src/include/osconf.hin | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/src/include/osconf.hin b/src/include/osconf.hin index 6feb22338..339e4b228 100644 --- a/src/include/osconf.hin +++ b/src/include/osconf.hin @@ -101,6 +101,11 @@ #define DEFAULT_KADM5_ACL_FILE "@LOCALSTATEDIR/krb5kdc/kadm5.acl" #define DEFAULT_KADM5_PORT 749 /* assigned by IANA */ +#define KRB5_DEFAULT_SUPPORTED_ENCTYPES \ + "aes256-cts-hmac-sha1-96:normal " \ + "aes128-cts-hmac-sha1-96:normal " \ + "des3-cbc-sha1:normal arcfour-hmac-md5:normal" + #define MAX_DGRAM_SIZE 4096 #define MAX_SKDC_TIMEOUT 30 #define SKDC_TIMEOUT_SHIFT 2 /* left shift of timeout for backoff */ |