[16453] in Kerberos-V5-bugs
[krbdev.mit.edu #8869] git commit
daemon@ATHENA.MIT.EDU (Greg Hudson via RT)
Thu Jan 23 14:34:46 2020
From: "Greg Hudson via RT" <rt-comment@KRBDEV-PROD-APP-1.mit.edu>
In-Reply-To:
Message-ID: <rt-4.4.4-14014-1579808062-1794.8869-4-0@mit.edu>
To: "AdminCc of krbdev.mit.edu Ticket #8869":;
Date: Thu, 23 Jan 2020 14:34:22 -0500
MIME-Version: 1.0
Reply-To: rt-comment@KRBDEV-PROD-APP-1.mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krb5-bugs-bounces@mit.edu
Thu Jan 23 14:34:22 2020: Request 8869 was acted upon.
Transaction: Ticket created by ghudson@mit.edu
Queue: krb5
Subject: git commit
Owner: ghudson@mit.edu
Requestors:
Status: new
Ticket <URL: https://krbdev.mit.edu/rt/Ticket/Display.html?id=8869 >
Apply permitted_enctypes to KDC request enctypes
permitted_enctypes was initially intended only to restrict the
processing of AP requests (and was later applied to KDB key data
searches so that the KDC wouldn't issue a ticket it would refuse to
accept). Because the documentation was never clear about its scope,
many configurations assume that permitted_enctypes also applies to
clients.
In light of the existing configurations, take the simple way out and
use permitted_enctypes as the default for default_tkt_enctypes and
default_tgs_enctypes. Update the documentation, add a test to
explicitly check the new behavior, and remove now-unnecessary
configuration from the test suite.
[ghudson@mit.edu: unrolled helper function; edited documentation and
commit message; simplified test case]
https://github.com/krb5/krb5/commit/8f13fb2342b2a715cfb694688e3435e7f11691f8
Author: Robbie Harwood <rharwood@redhat.com>
Committer: Greg Hudson <ghudson@mit.edu>
Commit: 8f13fb2342b2a715cfb694688e3435e7f11691f8
Branch: master
doc/admin/conf_files/krb5_conf.rst | 20 ++++--
doc/admin/enctypes.rst | 8 ++-
src/lib/krb5/krb/init_ctx.c | 144 ++++++++++++++++++----------------
src/man/krb5.conf.man | 22 ++++--
src/tests/dejagnu/config/default.exp | 16 ----
src/tests/gssapi/t_enctypes.py | 6 +-
src/tests/t_sesskeynego.py | 8 ++
src/util/k5test.py | 30 ++------
8 files changed, 128 insertions(+), 126 deletions(-)
_______________________________________________
krb5-bugs mailing list
krb5-bugs@mit.edu
https://mailman.mit.edu/mailman/listinfo/krb5-bugs
