krb5 commit: Document preference order of enctypes in krb5.conf
Zhanna A Tsitkova
tsitkova at MIT.EDU
Wed Aug 22 13:07:25 EDT 2012
https://github.com/krb5/krb5/commit/bbe2600c832bf23c208da30b5f702274bcb08fb1
commit bbe2600c832bf23c208da30b5f702274bcb08fb1
Author: Zhanna Tsitkov <tsitkova at mit.edu>
Date: Wed Aug 22 13:05:25 2012 -0400
Document preference order of enctypes in krb5.conf
doc/rst_source/krb_admins/conf_files/krb5_conf.rst | 8 +++++---
1 files changed, 5 insertions(+), 3 deletions(-)
diff --git a/doc/rst_source/krb_admins/conf_files/krb5_conf.rst b/doc/rst_source/krb_admins/conf_files/krb5_conf.rst
index a790caa..996f93b 100644
--- a/doc/rst_source/krb_admins/conf_files/krb5_conf.rst
+++ b/doc/rst_source/krb_admins/conf_files/krb5_conf.rst
@@ -157,8 +157,9 @@ The libdefaults section may contain any of the following relations:
**default_tgs_enctypes**
Identifies the supported list of session key encryption types that
- should be returned by the KDC. The list may be delimited with
- commas or whitespace. See :ref:`Encryption_and_salt_types` in
+ should be returned by the KDC, in order of preference from
+ highest to lowest. The list may be delimited with commas or
+ whitespace. See :ref:`Encryption_and_salt_types` in
:ref:`kdc.conf(5)` for a list of the accepted values for this tag.
The default value is |defetypes|, but single-DES encryption types
will be implicitly removed from this list if the value of
@@ -166,7 +167,8 @@ The libdefaults section may contain any of the following relations:
**default_tkt_enctypes**
Identifies the supported list of session key encryption types that
- should be requested by the client. The format is the same as for
+ should be requested by the client, in order of preference from
+ highest to lowest. The format is the same as for
default_tgs_enctypes. The default value for this tag is
|defetypes|, but single-DES encryption types will be implicitly
removed from this list if the value of **allow_weak_crypto** is
More information about the cvs-krb5
mailing list