On Wed, 2009-07-22 at 12:06 -0400, Zhanna Tsitkova wrote: > How is DEFAULT defined? The list of the default enctypes may be > different between krb releases and be effected by the security > advisories. Well, yes, that's the point: to be able to modify the default list of enctypes without replacing it.