[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Deleting only some salt types


On Feb 13, 2005, at 7:40 AM, Love wrote:

> I usully change the [kdc]\ndefault_keys= line on the kdc when doing  
> stuff
> like this.


> "Henry B. Hotz" <hotz@jpl.nasa.gov> writes:
>> I still have two keys though, one with the normal pw-salt(), and
>> another with an afs3 salt which I'm sure Windows hasn't a clue about.
>> (Hmmm.  Should be both v4 and v5 salts as well as afs3?  Different
>> issue.)
> Windows does have problems with v4 salted password, I think its fixed,  
> but
> not released yet. You really don't need to keep afs3 salted keys  
> around,
> klog also tries v4 s2k since about 10 years ago or so.

I'd noticed that (klog w std salt), but I was uncertain where the  
support was added and didn't want to obsolete anyone directly in the  
kaserver -> Kerb5 upgrade.  I don't mind obsoleting clients that old on  
purpose Real Soon Now, just didn't want to do it as an unnecessary side  
The opinions expressed in this message are mine,
not those of Caltech, JPL, NASA, or the US Government.
Henry.B.Hotz@jpl.nasa.gov, or hbhotz@oxy.edu