[8073] in Kerberos
Re: K5B7, 2 keys for 1 principal?
daemon@ATHENA.MIT.EDU (Sam Hartman)
Fri Sep 20 14:19:13 1996
To: dpassmor@revelation.cst.digex.net (David Passmore)
Cc: kerberos@MIT.EDU
From: Sam Hartman <hartmans@MIT.EDU>
Date: 20 Sep 1996 13:56:23 -0400
In-Reply-To: dpassmor@revelation.cst.digex.net's message of 20 Sep 1996 13:40:35 GMT
>>>>> "David" == David Passmore <dpassmor@revelation.cst.digex.net> writes:
David> I'm using Kerberos 5 beta 7. Whenever I add a new principal
David> using kadmin, it adds it with 2 keys. getprinc <principal>
David> returns:
David> Number of keys: 2 Key: vno 1, DES cbc mode with CRC-32,
David> Version 4 Key: vno 1, DES cbc mode with CRC-32, no salt
David> Attributes: Policy: [none]
David> The supported encryption types from kdc.conf look correct:
David> supported_enctypes = des-cbc-crc:v4 des-cbc-crc:normal
David> des:normal des:v4
David> A similarly configured system is doing what I would assume
David> to be the correct behavior, and only adding 1 key with no
David> salt (des-cbc-crc:v4). Does anyone have any ideas as to why
David> it would want to add two keys for a new principal?
In the default configuration it adds two keys: a key with V4
salt and a key with normal krb5 salt. Apparently, the normal salt key
is being desplayed as no-salt because implementation is improperly
leaking through an abstraction barrier.
David> Thanks, David
