Proposal: Support for 32 bit version numbers in keytabs

Jeffrey Altman jaltman at
Fri Dec 3 02:42:11 EST 2004

Jeffrey Altman wrote:
> I don't know but I am attempting to find out.

Here is the response from the Java Security team:

"This change will affect Java GSS/Kerberos compatibility.

"Sun's implementation of Java Kerberos assumes each record in the
keytab has fixed number of fields, hence adding version at the end
will not work for Java applications. The key version (kvno) is
expected to be 8-bit.

"Java uses Version 2 of MIT keytab file, and also supports reading
Version 1 keytab file to support backward compatibility."

- Jeff

More information about the krbdev mailing list