[krbdev.mit.edu #6789] Re: document preferred_preauth_types

Nicolas Williams via RT rt-comment at krbdev.mit.edu
Tue Sep 28 13:14:25 EDT 2010


On Tue, Sep 28, 2010 at 08:49:49AM -0400, Sam Hartman wrote:
> In a discussion on krbdev, Nico told Russ that krb5.conf could force
> preauth.
> Russ said he was unaware of that option; Nico thought he must have been
> mistaken.
> However, Quoting get_in_tkt.c:
> 
>     ret = krb5int_libdefault_string(context, realm,
>     KRB5_CONF_PREFERRED_PREAUTH\
>     _TYPES,
>                                         &preauth_types);

Reading the code I got the impression that this ony works when the KDC
requires pre-auth.

> This option should be documented.

It should be, yes.

Nico
-- 




More information about the krb5-bugs mailing list