Use keytab to select etypes in krb5_get_init_creds_keytab()

Greg Hudson ghudson at MIT.EDU
Tue Apr 17 14:44:41 EDT 2012


On 04/17/2012 02:39 PM, Nico Williams wrote:
> Would that be a problem?  I'm inclined to think that it would be.  But
> I'm not sure.  After all, it's only a "default".  Perhaps the right
> answer is "that's OK, but don't allow any non-permitted_enctypes",
[...]
> Is it time to have an enctype_preference parameter listing enctypes in
> order of preference?

I don't see any advantages to these alternatives over using
default_tkt_enctypes as a preference order (for this particular bit of
code).


More information about the krbdev mailing list