Received: from carter-zimmerman.suchdamage.org (carter-zimmerman.suchdamage.org [69.25.196.178]) by krbdev.mit.edu (8.12.9) with ESMTP id l3U87TL8028801; Mon, 30 Apr 2007 04:07:29 -0400 (EDT)
Received: by carter-zimmerman.suchdamage.org (Postfix, from userid 8042) id EDBD449B8; Mon, 30 Apr 2007 04:07:27 -0400 (EDT)
From: Sam Hartman <hartmans@mit.edu>
To: rt@krbdev.mit.edu
Subject: Re: [krbdev.mit.edu #5550] krb5_set_default_tgs_enctypes does not work in Kerberos 1.6
References: <rt-5550-23700.10.3543493475713@krbdev.mit.edu>
Date: Mon, 30 Apr 2007 04:07:27 -0400
In-Reply-To: <rt-5550-23700.10.3543493475713@krbdev.mit.edu> (Tom Yu via's message of "Sun, 29 Apr 2007 21:22:28 -0400 (EDT)")
Message-ID: <tsllkgai8u8.fsf@mit.edu>
User-Agent: Gnus/5.110006 (No Gnus v0.6) Emacs/21.4 (gnu/linux)
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
RT-Send-Cc: 
X-RT-Original-Encoding: us-ascii
Content-Length: 207

You need to somehow order the enctypes though so that enctypes that
end up in the restricted application set come first (and in their
order) when using conf_ktypes.

If you do that, this sounds reasonable.