Skip Menu |
 

From: ghudson@mit.edu
Subject: git commit

kadm5_randkey_principal interop with Solaris KDC

When kadm5_randkey_principal is called on Solaris kadmind (as opposed
to kadm5_randkey_principal_3), the KDC assumes the peer is a Solaris 9
system, and only creates DES keys.

For better interoperability, always call kadm5_randkey_principal_3
first. If this procedure is not present on the remote server, fall
back to calling kadm5_randkey_principal if possible.

[ghudson@mit.edu: adjusted comments, argument wrapping, commit
message]

https://github.com/krb5/krb5/commit/e86e3baaa684a7e891ffe852d74095c1a8b630ba
Author: Tomas Kuthan <tkuthan@gmail.com>
Committer: Greg Hudson <ghudson@mit.edu>
Commit: e86e3baaa684a7e891ffe852d74095c1a8b630ba
Branch: master
src/kadmin/cli/kadmin.c | 33 ++++++++++++++++++++++-----------
src/kadmin/cli/kadmin.h | 7 +++++++
src/kadmin/cli/keytab.c | 7 ++-----
3 files changed, 31 insertions(+), 16 deletions(-)
From: tlyu@mit.edu
Subject: git commit

kadm5_randkey_principal interop with Solaris KDC

When kadm5_randkey_principal is called on Solaris kadmind (as opposed
to kadm5_randkey_principal_3), the KDC assumes the peer is a Solaris 9
system, and only creates DES keys.

For better interoperability, always call kadm5_randkey_principal_3
first. If this procedure is not present on the remote server, fall
back to calling kadm5_randkey_principal if possible.

[ghudson@mit.edu: adjusted comments, argument wrapping, commit
message]

(cherry picked from commit e86e3baaa684a7e891ffe852d74095c1a8b630ba)

https://github.com/krb5/krb5/commit/bfd301a2d167c36ee4d5b53d06ae65ba814fa2d8
Author: Tomas Kuthan <tkuthan@gmail.com>
Committer: Tom Yu <tlyu@mit.edu>
Commit: bfd301a2d167c36ee4d5b53d06ae65ba814fa2d8
Branch: krb5-1.13
src/kadmin/cli/kadmin.c | 33 ++++++++++++++++++++++-----------
src/kadmin/cli/kadmin.h | 7 +++++++
src/kadmin/cli/keytab.c | 7 ++-----
3 files changed, 31 insertions(+), 16 deletions(-)