Default enctypes for principals and policies.

Roland Dowdeswell elric at imrryr.org
Wed Jun 25 13:59:26 EDT 2008


I'd like to offer a quick proposal.  I'd like to extend kadmin such
that default encryption types can be added to principals and policies
so that when changed via either kadmin or kpasswd they would override
the system wide default.

It turns out that in a number of cases, certain principals may
require lower security encryption types such as rc4-hmac than the
norm.

--
    Roland Dowdeswell                      http://www.Imrryr.ORG/~elric/



More information about the krbdev mailing list