Skip Menu |
 

History Show all quoted text — Show full headers
# Wed Sep 18 15:27:43 2002 mjv (Marshall Vale) - Ticket created
Subject: Sane defaults for configuration files
Download (untitled) / with headers
text/plain 108B
We need to make sure that for this release, the defaults in the
configuration files are sane and reasonable.
# Mon May 19 15:52:04 2003 mjv (Marshall Vale) - Given to raeburn (Ken Raeburn)
# Thu May 29 19:46:10 2003 raeburn (Ken Raeburn) - Comments added
Download (untitled) / with headers
text/plain 851B
notes from meeting:

Defaults Discussion:
- This is the sample configuration file that is in the distribution
- It is used by the test system so we need a configuration file that works
- Another goal of the sample file is so folks can quickly edit it and
get an environment up and going.
- Remove all enctype related items
- add examples for the kdc logging
- Remove explicit configs for all but one realm. Thus move to DNS (for
example realm that supports it) and leave one example that explicitly
sets them
- Drop Cygnus.com
Changes to in code defaults:
- kdctimesyncflag to 1 on all platforms
- default ccache type to 4
- kdc default master key type will be 3DES
- Remove AES 256
- Max life change to 24 hours (one day)
- Max renewable change to one week.
- file a bug to Remove kdc_supported_enctypes (this may involve code
so need to investigate)
# Fri May 30 12:24:00 2003 hartmans (Sam Hartman) - Comments added
To: rt-comment@krbdev.mit.edu
Cc: krb5-prs@mit.edu
Subject: Re: [krbdev.mit.edu #1190] Sane defaults for configuration files
From: Sam Hartman <hartmans@mit.edu>
Date: Fri, 30 May 2003 12:23:57 -0400
RT-Send-Cc:
Download (untitled) / with headers
text/plain 141B
To clarify we are only removing aes256 from the default
supported_enctypes (KDC) not from default_{tkt,tgs}_enctypes or
permitted_enctypes.
# Fri May 30 19:31:45 2003 raeburn (Ken Raeburn) - Status changed from 'new' to 'open'
# Fri May 30 19:31:45 2003 raeburn (Ken Raeburn) - Subject changed from 'Sane defaults for configuration files' to 'update kinit krb4 fallback lifetime default'
# Fri May 30 19:31:46 2003 raeburn (Ken Raeburn) - Correspondence added
From: raeburn@mit.edu
Subject: CVS Commit
Download (untitled) / with headers
text/plain 214B
* kinit.c (KRB4_BACKUP_DEFAULT_LIFE_SECS): Update to one day.


To generate a diff of this commit:



cvs diff -r5.70 -r5.71 krb5/src/clients/kinit/ChangeLog
cvs diff -r5.73 -r5.74 krb5/src/clients/kinit/kinit.c
# Fri May 30 19:32:57 2003 raeburn (Ken Raeburn) - Subject changed from 'update kinit krb4 fallback lifetime default' to 'Sane defaults for configuration files'
# Fri May 30 19:35:02 2003 raeburn (Ken Raeburn) - Correspondence added
From: raeburn@mit.edu
Subject: CVS Commit
Download (untitled) / with headers
text/plain 218B
* osconf.h (DEFAULT_KDC_ENCTYPE): Default to des3 now.


To generate a diff of this commit:



cvs diff -r5.42 -r5.43 krb5/src/include/krb5/stock/ChangeLog
cvs diff -r5.72 -r5.73 krb5/src/include/krb5/stock/osconf.h
# Fri May 30 19:36:03 2003 raeburn (Ken Raeburn) - Correspondence added
From: raeburn@mit.edu
Subject: CVS Commit
Download (untitled) / with headers
text/plain 255B
* init_ctx.c (DEFAULT_KDC_TIMESYNC): Define as 1 always.
(DEFAULT_CCACHE_TYPE): Define as 4 always.


To generate a diff of this commit:



cvs diff -r5.408 -r5.409 krb5/src/lib/krb5/krb/ChangeLog
cvs diff -r5.71 -r5.72 krb5/src/lib/krb5/krb/init_ctx.c
# Fri May 30 19:41:11 2003 raeburn (Ken Raeburn) - Correspondence added
From: raeburn@mit.edu
Subject: CVS Commit
Download (untitled) / with headers
text/plain 457B
* definitions.texinfo (DefaultCcacheType, DefaultKDCTimesync,
DefaultMasterKeyType): Updated for code changes.
(DefaultCcacheTypeMac, DefaultKDCTimesyncMac): Deleted.

* admin.texinfo (libdefaults): Update kdc_timesync and ccache_type descriptions
to not separate Mac case.


To generate a diff of this commit:



cvs diff -r1.80 -r1.81 krb5/doc/ChangeLog
cvs diff -r1.25 -r1.26 krb5/doc/admin.texinfo
cvs diff -r1.16 -r1.17 krb5/doc/definitions.texinfo
# Fri May 30 19:53:18 2003 raeburn (Ken Raeburn) - Correspondence added
From: raeburn@mit.edu
Subject: CVS Commit
Download (untitled) / with headers
text/plain 296B
* main.c (init_realm): Use KRB5_KDB_MAX_RLIFE, not KRB5_KDB_MAX_LIFE, as
default for realm's max renewable lifetime.

(KRB5_KDB_MAX_RLIFE is currently one week)


To generate a diff of this commit:



cvs diff -r5.263 -r5.264 krb5/src/kdc/ChangeLog
cvs diff -r5.116 -r5.117 krb5/src/kdc/main.c
# Fri May 30 19:57:00 2003 raeburn (Ken Raeburn) - Correspondence added
From: raeburn@mit.edu
Subject: CVS Commit
Download (untitled) / with headers
text/plain 265B
* get_in_tkt.c (krb5_get_init_creds): Change hardcoded default ticket lifetime
from 10 hours to 24 hours.


To generate a diff of this commit:



cvs diff -r5.409 -r5.410 krb5/src/lib/krb5/krb/ChangeLog
cvs diff -r5.106 -r5.107 krb5/src/lib/krb5/krb/get_in_tkt.c
# Fri May 30 19:58:15 2003 raeburn (Ken Raeburn) - Correspondence added
From: raeburn@mit.edu
Subject: CVS Commit
Download (untitled) / with headers
text/plain 206B
* definitions.texinfo (DefaultTktLifetime): Updated for code changes.


To generate a diff of this commit:



cvs diff -r1.81 -r1.82 krb5/doc/ChangeLog
cvs diff -r1.17 -r1.18 krb5/doc/definitions.texinfo
# Fri May 30 23:30:02 2003 raeburn (Ken Raeburn) - Correspondence added
From: raeburn@mit.edu
Subject: CVS Commit
Download (untitled) / with headers
text/plain 281B
* krb5.conf.M: Remove "kdc =" lines from "realms" section example, and
recommend not using it unless DNS info isn't available.


To generate a diff of this commit:



cvs diff -r5.35 -r5.36 krb5/src/config-files/ChangeLog
cvs diff -r5.17 -r5.18 krb5/src/config-files/krb5.conf.M
# Fri May 30 23:33:24 2003 raeburn (Ken Raeburn) - Correspondence added
From: raeburn@mit.edu
Subject: CVS Commit
Download (untitled) / with headers
text/plain 385B
* krb5.conf: Delete Athena KDC specifications. Delete Cygnus realm info.
Replace CLUB.CC.CMU.EDU info with ANDREW.CMU.EDU, which has SRV records and
thus doesn't need KDC specs. Provide a commented-out example of a [logging]
spec.


To generate a diff of this commit:



cvs diff -r5.36 -r5.37 krb5/src/config-files/ChangeLog
cvs diff -r5.10 -r5.11 krb5/src/config-files/krb5.conf
# Fri May 30 23:34:26 2003 raeburn (Ken Raeburn) - Correspondence added
From: raeburn@mit.edu
Subject: CVS Commit
Download (untitled) / with headers
text/plain 201B
* krb5.conf: Delete commented-out enctype specs.


To generate a diff of this commit:



cvs diff -r5.37 -r5.38 krb5/src/config-files/ChangeLog
cvs diff -r5.11 -r5.12 krb5/src/config-files/krb5.conf
# Fri May 30 23:35:44 2003 raeburn (Ken Raeburn) - Correspondence added
From: raeburn@mit.edu
Subject: CVS Commit
Download (untitled) / with headers
text/plain 207B
* kdc.conf: Delete supported and master key type specs.


To generate a diff of this commit:



cvs diff -r5.38 -r5.39 krb5/src/config-files/ChangeLog
cvs diff -r5.10 -r5.11 krb5/src/config-files/kdc.conf
# Fri May 30 23:56:57 2003 raeburn (Ken Raeburn) - Correspondence added
From: raeburn@mit.edu
Subject: CVS Commit
Download (untitled) / with headers
text/plain 223B
* alt_prof.c (kadm5_get_config_params): Change default max_life to one day.


To generate a diff of this commit:



cvs diff -r1.91 -r1.92 krb5/src/lib/kadm5/ChangeLog
cvs diff -r1.37 -r1.38 krb5/src/lib/kadm5/alt_prof.c
# Sat May 31 00:06:04 2003 raeburn (Ken Raeburn) - Correspondence added
From: raeburn@mit.edu
Subject: CVS Commit
Download (untitled) / with headers
text/plain 189B
More visible notes on incompleteness of AES support.
Note master key type change.
Note default lifetime changes.


To generate a diff of this commit:



cvs diff -r1.25 -r1.26 krb5/README
# Sat May 31 00:16:34 2003 raeburn (Ken Raeburn) - Comments added
To: rt-comment@krbdev.mit.edu
Subject: [krbdev.mit.edu #1190] sane defaults for configuration files
From: Ken Raeburn <raeburn@MIT.EDU>
Date: Sat, 31 May 2003 00:16:31 -0400
RT-Send-Cc:
Download (untitled) / with headers
text/plain 1.7KiB
I think I've got it mostly covered now, enough to pull up changes:

Defaults Discussion:
- Remove all enctype related items

Done.

- add examples for the kdc logging

Done (commented out, or we'd probably break our own testing).

- Remove explicit configs for all but one realm. Thus move to DNS (for
example realm that supports it) and leave one example that explicitly
sets them

This meant just the "kdc =" configuration, right? Not removing all
configuration info for all but one realm? Done, though I swapped out
CLUB.CC.CMU.EDU for ANDREW.CMU.EDU (data from Athena's krb5.conf),
which has SRV records, so we can omit the "kdc =" bits and still be
accurate.

- Drop Cygnus.com

Done.

Changes to in code defaults:
- kdctimesyncflag to 1 on all platforms
- default ccache type to 4
- kdc default master key type will be 3DES

Done. Updated texinfo docs. Defaults not in man pages.

- Remove AES 256

Done a couple weeks ago.

- Max life change to 24 hours (one day)

Done, in client library code, and kadmin principal registration
defaults. Updated texinfo docs. Defaults not in man pages. (The
kinit man page actually lies, and says the default is configured by
site. It's compiled in, the libdefaults entry isn't used.)

- Max renewable change to one week.

The macro for max renewable life was already set this way, but wasn't
being used properly. Kadmin defaults to 0, not changed. Updated
texinfo docs.

- file a bug to Remove kdc_supported_enctypes (this may involve code
so need to investigate)

Ignoring this for now. Someone who can summon more context than I can
at the moment (like, why it's been decided that it definitely needs
removing, and whether we care about the functionality) can file it...

Ken
# Sat May 31 00:17:12 2003 raeburn (Ken Raeburn) - Tags pullup added
# Mon Jun 02 01:49:08 2003 raeburn (Ken Raeburn) - Correspondence added
From: raeburn@mit.edu
Subject: CVS Commit
Download (untitled) / with headers
text/plain 250B
* api.2/init-v2.exp (test117): Update lifetime expected for new defaults.


To generate a diff of this commit:



cvs diff -r1.56 -r1.57 krb5/src/lib/kadm5/unit-test/ChangeLog
cvs diff -r1.17 -r1.18
krb5/src/lib/kadm5/unit-test/api.2/init-v2.exp
# Wed Jun 04 00:19:07 2003 tlyu (Taylor Yu) - Correspondence added
From: tlyu@mit.edu
Subject: CVS Commit
Download (untitled) / with headers
text/plain 284B
* Makefile.in (kdb_check): Remove uses of "dump -old", etc., since
it doesn't work anymore given the new default for triple-DES
master keys.


To generate a diff of this commit:



cvs diff -r5.38 -r5.39 krb5/src/tests/ChangeLog
cvs diff -r5.20 -r5.21 krb5/src/tests/Makefile.in
# Thu Jun 05 21:26:57 2003 tlyu (Taylor Yu) - Status changed from 'open' to 'resolved'
# Thu Jun 05 21:26:58 2003 tlyu (Taylor Yu) - Version_Fixed 1.3 added
# Thu Jun 05 21:26:58 2003 tlyu (Taylor Yu) - Correspondence added
From: tlyu@mit.edu
Subject: CVS Commit
Download (untitled) / with headers
text/plain 1.4KiB
pullup from trunk


To generate a diff of this commit:



cvs diff -r1.20.2.8 -r1.20.2.9 krb5/README
cvs diff -r1.68.2.8 -r1.68.2.9 krb5/doc/ChangeLog
cvs diff -r1.21.2.3 -r1.21.2.4 krb5/doc/admin.texinfo
cvs diff -r1.13.2.3 -r1.13.2.4 krb5/doc/definitions.texinfo
cvs diff -r5.69.2.1 -r5.69.2.2 krb5/src/clients/kinit/ChangeLog
cvs diff -r5.72.2.1 -r5.72.2.2 krb5/src/clients/kinit/kinit.c
cvs diff -r5.34.2.1 -r5.34.2.2 krb5/src/config-files/ChangeLog
cvs diff -r5.10 -r5.10.20.1 krb5/src/config-files/kdc.conf
cvs diff -r5.10 -r5.10.2.1 krb5/src/config-files/krb5.conf
cvs diff -r5.17 -r5.17.2.1 krb5/src/config-files/krb5.conf.M
cvs diff -r5.42 -r5.42.2.1 krb5/src/include/krb5/stock/ChangeLog
cvs diff -r5.72 -r5.72.2.1 krb5/src/include/krb5/stock/osconf.h
cvs diff -r5.251.2.11 -r5.251.2.12 krb5/src/kdc/ChangeLog
cvs diff -r5.115.2.2 -r5.115.2.3 krb5/src/kdc/main.c
cvs diff -r1.88.2.3 -r1.88.2.4 krb5/src/lib/kadm5/ChangeLog
cvs diff -r1.35.2.3 -r1.35.2.4 krb5/src/lib/kadm5/alt_prof.c
cvs diff -r1.55.2.1 -r1.55.2.2
krb5/src/lib/kadm5/unit-test/ChangeLog
cvs diff -r1.17 -r1.17.2.1
krb5/src/lib/kadm5/unit-test/api.2/init-v2.exp
cvs diff -r5.378.2.17 -r5.378.2.18 krb5/src/lib/krb5/krb/ChangeLog
cvs diff -r5.101.2.5 -r5.101.2.6 krb5/src/lib/krb5/krb/get_in_tkt.c
cvs diff -r5.68.2.1 -r5.68.2.2 krb5/src/lib/krb5/krb/init_ctx.c
cvs diff -r5.38 -r5.38.2.1 krb5/src/tests/ChangeLog
cvs diff -r5.20 -r5.20.2.1 krb5/src/tests/Makefile.in
# Wed Dec 16 18:02:39 2015 tlyu (Taylor Yu) - CustomField pullup deleted