Ticket History #7792: supported_enctypes parsing does not handle DEFAULT

# Wed Dec 04 19:03:46 2013 kaduk@MIT.EDU (Benjamin Kaduk) - Ticket created

Subject:

supported_enctypes parsing does not handle DEFAULT

Download (untitled) / with headers
text/plain 543B

The parsing used by kadm5_get_config_params (i.e., krb5_string_to_keysalts) does not handle
DEFAULT (as krb5int_parse_enctype list, used to parse the other enctype profile variables, does),
though our documentation claims that supported_enctypes will honor DEFAULT.

Additionally, kadm5_get_config_params ignores the return value of krb5_string_to_keysalts, so
errors in the supported_enctype list only result in kadmind failing to startup if the first entry is
invalid.

Reported by CSights <cwseys@physics.wisc.edu> in Debian bug 730583.

# Tue Dec 10 00:11:33 2013 tlyu (Taylor Yu) - Comments added

Download (untitled) / with headers
text/plain 55B

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=730583

# Mon Jan 06 17:04:35 2014 tlyu (Taylor Yu) - Status changed from 'new' to 'open'

# Mon Jan 06 17:04:35 2014 tlyu (Taylor Yu) - Ticket 7792 RefersTo ticket 884.

# Mon Jan 06 17:04:35 2014 tlyu (Taylor Yu) - Comments added

Download (untitled) / with headers
text/plain 177B

Looks like #884 is related, but we'll probably also have to redesign some of the interfaces so
that keysalt pairs are a libkrb5 or libk5crypto thing rather than a libkdb thing.