regression due to referral realm

Nicolas Williams Nicolas.Williams at sun.com
Thu Feb 5 11:30:29 EST 2009


On Wed, Feb 04, 2009 at 12:15:24PM -0800, Henry B. Hotz wrote:
> As a tangental nit, I wish the list of supported enctypes sent by  
> krb5_get_init_creds_keytab() was limited to those actually in the  
> keytab file (that are also supported by the library in question of  
> course).  Since this has been discussed in the past, it's possible you- 
> all have taken care of it, and I'm out of date.

That's a separate issue, and not necessarily a bug: as long as the
keytab and the KDB entry for that princ ar in sync there's no problem.

Also, IIRC you can affect this via default_*_enctypes.



More information about the krbdev mailing list