- kdc.conf: no more need to suggest keeping keys with v4-compatible salting

This commit is contained in:
Nalin Dahyabhai 2010-03-23 18:18:32 +00:00
parent 4a2bf7dc5d
commit cac63d2dfa
2 changed files with 2 additions and 1 deletions

View File

@ -9,5 +9,5 @@
acl_file = /var/kerberos/krb5kdc/kadm5.acl
dict_file = /usr/share/dict/words
admin_keytab = /var/kerberos/krb5kdc/kadm5.keytab
supported_enctypes = aes256-cts:normal aes128-cts:normal des3-hmac-sha1:normal arcfour-hmac:normal des-hmac-sha1:normal des-cbc-md5:normal des-cbc-crc:normal des-cbc-crc:v4 des-cbc-crc:afs3
supported_enctypes = aes256-cts:normal aes128-cts:normal des3-hmac-sha1:normal arcfour-hmac:normal des-hmac-sha1:normal des-cbc-md5:normal des-cbc-crc:normal
}

View File

@ -626,6 +626,7 @@ exit 0
%changelog
* Tue Mar 23 2010 Nalin Dahyabhai <nalin@redhat.com> - 1.8-5
- add upstream fix for denial-of-service in SPNEGO (CVE-2010-0628)
- kdc.conf: no more need to suggest keeping keys with v4-compatible salting
* Fri Mar 19 2010 Nalin Dahyabhai <nalin@redhat.com> - 1.8-4
- remove the krb5-appl bits (the -workstation-clients and -workstation-servers