krb5 commit: Document preference order of enctypes in krb5.conf

Zhanna A Tsitkova tsitkova at MIT.EDU
Wed Aug 22 13:07:25 EDT 2012


https://github.com/krb5/krb5/commit/bbe2600c832bf23c208da30b5f702274bcb08fb1
commit bbe2600c832bf23c208da30b5f702274bcb08fb1
Author: Zhanna Tsitkov <tsitkova at mit.edu>
Date:   Wed Aug 22 13:05:25 2012 -0400

    Document preference order of enctypes in krb5.conf

 doc/rst_source/krb_admins/conf_files/krb5_conf.rst |    8 +++++---
 1 files changed, 5 insertions(+), 3 deletions(-)

diff --git a/doc/rst_source/krb_admins/conf_files/krb5_conf.rst b/doc/rst_source/krb_admins/conf_files/krb5_conf.rst
index a790caa..996f93b 100644
--- a/doc/rst_source/krb_admins/conf_files/krb5_conf.rst
+++ b/doc/rst_source/krb_admins/conf_files/krb5_conf.rst
@@ -157,8 +157,9 @@ The libdefaults section may contain any of the following relations:
 
 **default_tgs_enctypes**
     Identifies the supported list of session key encryption types that
-    should be returned by the KDC.  The list may be delimited with
-    commas or whitespace.  See :ref:`Encryption_and_salt_types` in
+    should be returned by the KDC, in order of preference from
+    highest to lowest.  The list may be delimited with commas or
+    whitespace.  See :ref:`Encryption_and_salt_types` in
     :ref:`kdc.conf(5)` for a list of the accepted values for this tag.
     The default value is |defetypes|, but single-DES encryption types
     will be implicitly removed from this list if the value of
@@ -166,7 +167,8 @@ The libdefaults section may contain any of the following relations:
 
 **default_tkt_enctypes**
     Identifies the supported list of session key encryption types that
-    should be requested by the client.  The format is the same as for
+    should be requested by the client, in order of preference from
+    highest to lowest.  The format is the same as for
     default_tgs_enctypes.  The default value for this tag is
     |defetypes|, but single-DES encryption types will be implicitly
     removed from this list if the value of **allow_weak_crypto** is


More information about the cvs-krb5 mailing list