dbentry_supports_enctype and 1DES enctypes
Will Fiveash
William.Fiveash at sun.com
Mon Aug 29 19:38:01 EDT 2005
On Mon, Aug 29, 2005 at 04:59:18PM -0500, Will Fiveash wrote:
> This would allow the admin to explicitly control the entypes used for
> session keys for that service principal by limiting the enctypes of the
> service princ's keys in the princ DB.
BTW, I realize that permitted_enctypes in the server's krb5.conf will
allow the server to prevent certain enctypes from being used as session
keys but this doesn't prevent the KDC from issueing 1DES session keys.
--
Will Fiveash
Sun Microsystems Inc.
Austin, TX, USA (TZ=CST6CDT)
More information about the krbdev
mailing list