krb5 commit [krb5-1.11]: Clean up dangling antecedent in allow_weak_crypto
Tom Yu
tlyu at MIT.EDU
Fri May 31 15:28:20 EDT 2013
https://github.com/krb5/krb5/commit/d5a56bcae9bd433b5ccccc449398774464bcd035
commit d5a56bcae9bd433b5ccccc449398774464bcd035
Author: Ben Kaduk <kaduk at mit.edu>
Date: Fri May 31 12:48:46 2013 -0400
Clean up dangling antecedent in allow_weak_crypto
The "previous three lists" are not previous any more.
Say explicitly which three lists, and make the parenthetical bind
to the correct noun.
(cherry picked from commit 2a10e19e19c65af0e3890bdeae03c37089ef02ea)
ticket: 7655
version_fixed: 1.11.3
status: resolved
doc/admin/conf_files/krb5_conf.rst | 12 ++++++------
1 files changed, 6 insertions(+), 6 deletions(-)
diff --git a/doc/admin/conf_files/krb5_conf.rst b/doc/admin/conf_files/krb5_conf.rst
index 60a9d06..6dcccaa 100644
--- a/doc/admin/conf_files/krb5_conf.rst
+++ b/doc/admin/conf_files/krb5_conf.rst
@@ -99,12 +99,12 @@ Additionally, krb5.conf may include any of the relations described in
The libdefaults section may contain any of the following relations:
**allow_weak_crypto**
- If this flag is set to false, then weak encryption types will be
- filtered out of the previous three lists (as noted in
- :ref:`Encryption_and_salt_types` in :ref:`kdc.conf(5)`). The
- default value for this tag is false, which may cause
- authentication failures in existing Kerberos infrastructures that
- do not support strong crypto. Users in affected environments
+ If this flag is set to false, then weak encryption types (as noted in
+ :ref:`Encryption_and_salt_types` in :ref:`kdc.conf(5)`) will be filtered
+ out of the lists **default_tgs_enctypes**, **default_tkt_enctypes**, and
+ **permitted_enctypes**. The default value for this tag is false, which
+ may cause authentication failures in existing Kerberos infrastructures
+ that do not support strong crypto. Users in affected environments
should set this tag to true until their infrastructure adopts
stronger ciphers.
More information about the cvs-krb5
mailing list