Enabling preauthentication on linux kdc

[John Hascall]

> Hi,
> 
> I have a question regarding enabling kerberos pre-authentication on

> [realms]
> NEVISTEST.COM = {
> require-preauth = yes
> default_principal_flags = +preauth

I've never heard of 'require-preauth = yes' as a config file option.
Setting 'default_principal_flags' only effects principals you create
when it is in effect -- it doesn't touch existing principals -- you
will need to use the modprinc command of the kadmin program to set
the requires_preauth flag on any existing principals.

John