[krbdev.mit.edu #5869] add_principals -randkey and default_principal_flags = +preauth don't get along

John Washington via RT rt-comment at krbdev.mit.edu
Mon Jan 7 20:12:59 EST 2008


When creating principals with -randkey I have noticed that kadmin
doesn't obey the kdc.conf.  While this may just be a case of
documentation not obviously saying this, it is annoying in today's world
of all preauth'ed principals.  I should note that it does work without
-randkey or with +requires_preauth, but this behavior creates an
annoying problem for bulk user creation scripts which rely on the
default defining the proper behavior.

-- 
John Washington       Security Officer, 
University of Illinois Urbana-Champaign




More information about the krb5-bugs mailing list