Migrating a Kerberos Realm
Ken Raeburn
raeburn at MIT.EDU
Wed Nov 1 22:21:53 EST 2006
On Nov 1, 2006, at 22:04, John Hascall wrote:
> If anyone is thinking of going down this road, be aware that
> there are some crappy client implementations out there
> (* looks in the direction of WebCT Vista and coughs *)
> that don't handle a non-default salt correctly...
And here I was, thinking it would be a good idea to pick random salt
strings on password changes, to make certain attacks more costly....
Ken
More information about the Kerberos
mailing list