From: Jeffrey Altman <jaltman@secure-endpoints.com>
Date: Sat, 30 Dec 2006 17:02:35 +0000 (+0000)
Subject: STABLE14-kaserver-deprecation-warning-20061230
X-Git-Tag: openafs-stable-1_4_3rc1~35
X-Git-Url: https://git.michaelhowe.org/gitweb/?a=commitdiff_plain;h=d2a26afda4db9e11c4beab0ff88be6a938bc15de;p=packages%2Fo%2Fopenafs.git

STABLE14-kaserver-deprecation-warning-20061230


The following message is now logged to both the BosLog and the AuthLog
at startup.

  WARNING: kaserver is deprecated due to its weak security properties.
  Migrating to a Kerberos 5 KDC is advised.
  http://www.openafs.org/no-more-des.html


(cherry picked from commit 0995d4d9b3059569d1fa2ed330982e4dfe021cac)
---

diff --git a/src/kauth/kaserver.c b/src/kauth/kaserver.c
index c4fc3cf21..1ce89cf78 100644
--- a/src/kauth/kaserver.c
+++ b/src/kauth/kaserver.c
@@ -343,6 +343,14 @@ main(argc, argv)
     OpenLog(AFSDIR_SERVER_KALOG_FILEPATH);
     SetupLogSignals();
 #endif
+
+    fprintf(stderr, "%s: WARNING: kaserver is deprecated due to its weak security "
+	    "properties.  Migrating to a Kerberos 5 KDC is advised.  "
+	    "http://www.openafs.org/no-more-des.html\n", whoami);
+    ViceLog(0, ("WARNING: kaserver is deprecated due to its weak security properties.  "
+	    "Migrating to a Kerberos 5 KDC is advised.  "
+	    "http://www.openafs.org/no-more-des.html\n"));
+
     code =
 	afsconf_GetExtendedCellInfo(KA_conf, cell, AFSCONF_KAUTHSERVICE,
 				    &cellinfo, &clones);