[15540] in Kerberos_V5_Development
Re: krb5-1.8-beta2 is available
daemon@ATHENA.MIT.EDU (Marcus Watts)
Fri Feb 26 12:17:58 2010
To: krbdev@mit.edu
In-reply-to: <ldvr5o8rmwx.fsf@cathode-dark-space.mit.edu>
Date: Fri, 26 Feb 2010 12:17:55 -0500
From: Marcus Watts <mdw@umich.edu>
Message-Id: <E1Nl3p5-0002IC-Gd@bruson.ifs.umich.edu>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krbdev-bounces@mit.edu
Tom Yu <tlyu@mit.edu> writes:
...
> have a final release early next week. We would appreciate feedback on
> documentation, particularly about the DES transition and
> "allow_weak_crypto".
...
The README file says
> variable that enables "weak" enctypes, which now defaults to "false"
> beginning with krb5-1.8. The krb5-1.8 release includes additional
> measures to ease the transition away from single-DES.
The README doesn't say what those other measures are.
As folks said, you don't have krb5-1.8b1-getprinc.patch.
I applied that and installed in my test environment. So far,
things just work. I have a radmind overload that makes
sets /usr/local/mit-k5-1.8beta2/etc/krb5.conf to read:
[libdefaults]
allow_weak_crypto = 1
this works as advertised as well, and certainly makes it pretty
painless to experiment.
Things that I'd love to see in some future version of the code,
* a configure option that actually *removes* the single-des
cryptosystem from the built code (as opposed to merely disabling it).
* python 2.6 support.
-Marcus Watts
_______________________________________________
krbdev mailing list krbdev@mit.edu
https://mailman.mit.edu/mailman/listinfo/krbdev
