regression due to referral realm
Nicolas Williams
Nicolas.Williams at sun.com
Thu Feb 5 11:30:29 EST 2009
On Wed, Feb 04, 2009 at 12:15:24PM -0800, Henry B. Hotz wrote:
> As a tangental nit, I wish the list of supported enctypes sent by
> krb5_get_init_creds_keytab() was limited to those actually in the
> keytab file (that are also supported by the library in question of
> course). Since this has been discussed in the past, it's possible you-
> all have taken care of it, and I'm out of date.
That's a separate issue, and not necessarily a bug: as long as the
keytab and the KDB entry for that princ ar in sync there's no problem.
Also, IIRC you can affect this via default_*_enctypes.
More information about the krbdev
mailing list