[krbdev.mit.edu #6789] Re: document preferred_preauth_types
Nicolas Williams via RT
rt-comment at krbdev.mit.edu
Tue Sep 28 13:14:25 EDT 2010
On Tue, Sep 28, 2010 at 08:49:49AM -0400, Sam Hartman wrote:
> In a discussion on krbdev, Nico told Russ that krb5.conf could force
> preauth.
> Russ said he was unaware of that option; Nico thought he must have been
> mistaken.
> However, Quoting get_in_tkt.c:
>
> ret = krb5int_libdefault_string(context, realm,
> KRB5_CONF_PREFERRED_PREAUTH\
> _TYPES,
> &preauth_types);
Reading the code I got the impression that this ony works when the KDC
requires pre-auth.
> This option should be documented.
It should be, yes.
Nico
--
More information about the krb5-bugs
mailing list