summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorNalin Dahyabhai <nalin@fedoraproject.org>2005-08-31 19:37:54 +0000
committerNalin Dahyabhai <nalin@fedoraproject.org>2005-08-31 19:37:54 +0000
commit1fcd49e050d46fbf22584e676b2fd6787b5b62db (patch)
tree001eb3cf79f352c9471f32ee53762b27c53ab3f1
parentf5b93c728ec09940bcf4dabdc1b77983868589bd (diff)
downloadkrb5-1fcd49e050d46fbf22584e676b2fd6787b5b62db.tar.gz
krb5-1fcd49e050d46fbf22584e676b2fd6787b5b62db.tar.xz
krb5-1fcd49e050d46fbf22584e676b2fd6787b5b62db.zip
- change the default configured encryption type for KDC databases to the
compiled-in default of des3-hmac-sha1 (#57847)
-rw-r--r--kdc.conf2
-rw-r--r--krb5.spec4
2 files changed, 5 insertions, 1 deletions
diff --git a/kdc.conf b/kdc.conf
index 73b6430..ce43458 100644
--- a/kdc.conf
+++ b/kdc.conf
@@ -6,6 +6,6 @@
[realms]
EXAMPLE.COM = {
- master_key_type = des-cbc-crc
+ #master_key_type = des3-hmac-sha1
supported_enctypes = des3-hmac-sha1:normal arcfour-hmac:normal des-hmac-sha1:normal des-cbc-md5:normal des-cbc-crc:normal des-cbc-crc:v4 des-cbc-crc:afs3
}
diff --git a/krb5.spec b/krb5.spec
index 5a4de1b..71d5e7f 100644
--- a/krb5.spec
+++ b/krb5.spec
@@ -130,6 +130,10 @@ network uses Kerberos, this package should be installed on every
workstation.
%changelog
+* Wed Aug 31 2005 Nalin Dahyabhai <nalin@redhat.com> 1.4.2-2
+- change the default configured encryption type for KDC databases to the
+ compiled-in default of des3-hmac-sha1 (#57847)
+
* Thu Aug 11 2005 Nalin Dahyabhai <nalin@redhat.com> 1.4.2-1
- update to 1.4.2, incorporating the fixes for MIT-KRB5-SA-2005-002 and
MIT-KRB5-SA-2005-003