86420dd2f3
- Resolves: RHEL-53501 adtrustinstance only prints issues in check_inst() and does not log them - Resolves: RHEL-52305 Unconditionally add MS-PAC to global config - Resolves: RHEL-52223 ipa-replica/server-install with softhsm needs to check permission/ownership of /var/lib/softhsm/tokens to avoid install failure - Resolves: RHEL-51937 Include latest fixes in python3-ipatests packages - Resolves: RHEL-50805 ipa-migrate -Z with invalid cert options fails with 'ValueError: option error' - Resolves: RHEL-49805 misleading warning for missing ipa-selinux-nfast package on luna hsm h/w - Resolves: RHEL-49592 'Unable to log in as uid=admin-replica.testrealm.test,ou=people,o=ipaca' during replica install - Resolves: RHEL-4879 RFE - Keep the configured value for the "nsslapd-ignore-time-skew" after a "force-sync" Signed-off-by: Florence Blanc-Renaud <flo@redhat.com>
27 lines
1.1 KiB
Diff
27 lines
1.1 KiB
Diff
From 9f88188204e443dd5d1d22ebe65b947452558f66 Mon Sep 17 00:00:00 2001
|
|
From: Julien Rische <jrische@redhat.com>
|
|
Date: Wed, 17 Jul 2024 15:47:33 +0200
|
|
Subject: [PATCH] Remove RC4 and 3DES default encryption types on update
|
|
|
|
Fixes: https://pagure.io/freeipa/issue/9633
|
|
|
|
Signed-off-by: Julien Rische <jrische@redhat.com>
|
|
Reviewed-By: Florence Blanc-Renaud <frenaud@redhat.com>
|
|
---
|
|
install/updates/50-krbenctypes.update | 2 ++
|
|
1 file changed, 2 insertions(+)
|
|
|
|
diff --git a/install/updates/50-krbenctypes.update b/install/updates/50-krbenctypes.update
|
|
index 1058a92d8f5a4971e9ecab52506981b8e470ff77..1bf2bf33a6566586639767771dff501d91a03508 100644
|
|
--- a/install/updates/50-krbenctypes.update
|
|
+++ b/install/updates/50-krbenctypes.update
|
|
@@ -7,3 +7,5 @@ add: krbSupportedEncSaltTypes: aes128-sha2:normal
|
|
add: krbSupportedEncSaltTypes: aes128-sha2:special
|
|
add: krbSupportedEncSaltTypes: aes256-sha2:normal
|
|
add: krbSupportedEncSaltTypes: aes256-sha2:special
|
|
+remove: krbDefaultEncSaltTypes: des3-hmac-sha1:special
|
|
+remove: krbDefaultEncSaltTypes: arcfour-hmac:special
|
|
--
|
|
2.45.2
|
|
|