]> git.michaelhowe.org Git - packages/o/openafs.git/commit
Enable weak enctypes for aklog if supported by Kerberos
authorRuss Allbery <rra@stanford.edu>
Fri, 22 Jan 2010 19:04:10 +0000 (11:04 -0800)
committerDerrick Brashear <shadow|account-1000005@unknown>
Fri, 22 Jan 2010 19:33:36 +0000 (11:33 -0800)
commitd22e6c08bea7192603e94e751d6e38ae49d04951
tree8f13f3d08be18003943e8a10eda21dbaecc74661
parent26ffbd3f1c07420796c772e821786cfa4bcc0bc5
Enable weak enctypes for aklog if supported by Kerberos

Current versions of both MIT Kerberos and Heimdal disable DES enctypes
by default, but DES enctypes are still required for AFS service tickets.
Probe for either krb5_allow_weak_crypto() (MIT Kerberos 1.8) or
krb5_enctype_enable() (Heimdal) and, if found, call them to enable DES
enctypes.  If neither is found, assume that the Kerberos libraries are
old enough that DES is enabled by default.

Change-Id: Ib5231bb7c2fe88f4c424628394ed08122d5710a1
Reviewed-on: http://gerrit.openafs.org/1141
Reviewed-by: Derrick Brashear <shadow@dementia.org>
Tested-by: Derrick Brashear <shadow@dementia.org>
(cherry picked from commit cb4b62a40352ccebae3a299f4327fa70fc7a0c5c)
Reviewed-on: http://gerrit.openafs.org/1145
Tested-by: Russ Allbery <rra@stanford.edu>
src/aklog/aklog_main.c
src/cf/kerberos.m4