krb5 commit [krb5-1.18]: Update mitK5features.rst for beta2 features

Greg Hudson ghudson at mit.edu
Wed Feb 12 13:44:27 EST 2020


https://github.com/krb5/krb5/commit/24dd157de13f30ea5e73a4dfdb429751ea6f8514
commit 24dd157de13f30ea5e73a4dfdb429751ea6f8514
Author: Greg Hudson <ghudson at mit.edu>
Date:   Tue Feb 11 16:58:42 2020 -0500

    Update mitK5features.rst for beta2 features

 doc/mitK5features.rst |    7 +++++++
 1 files changed, 7 insertions(+), 0 deletions(-)

diff --git a/doc/mitK5features.rst b/doc/mitK5features.rst
index a7e55f2..513ecfd 100644
--- a/doc/mitK5features.rst
+++ b/doc/mitK5features.rst
@@ -489,6 +489,9 @@ Release 1.18
     credential forwarding during GSSAPI authentication unless the KDC
     sets the ok-as-delegate bit in the service ticket.
 
+  - Use the ``permitted_enctypes`` krb5.conf setting as the default
+    value for ``default_tkt_enctypes`` and ``default_tgs_enctypes``.
+
 * Developer experience:
 
   - Implement krb5_cc_remove_cred() for all credential cache types.
@@ -507,6 +510,10 @@ Release 1.18
   - Add support for Microsoft NegoEx.  (Requires one or more
     third-party GSS modules implementing NegoEx mechanisms.)
 
+  - Honor the transited-policy-checked ticket flag on application
+    servers, eliminating the requirement to configure capaths on
+    servers in some scenarios.
+
 * User experience:
 
   - Add support for ``dns_canonicalize_hostname=fallback``, causing


More information about the cvs-krb5 mailing list