| commit | 256cf6ea12d9e844591b6c4af63b161169f652c3 | |
| author | Nicolas Williams <nico103@gmail.com> | |
| Wed, 6 Apr 2011 06:26:37 +0000 (6 01:26 -0500) | ||
| committer | Love Hörnquist Åstrand <lha@h5l.org> | |
| Wed, 15 Jun 2011 03:35:19 +0000 (14 20:35 -0700) | ||
| tree | cdd9a160f686dd6962b8b16e23a1098dbeab7ce4 | treesnapshot (tar.gz zip) |
| parent | 481fe133b232f44625f446bac38a853a5a87e88e | commitdiff |
This patch adds support for a use-strongest-server-key krb5.conf kdc parameter that controls how the KDC (AS and TGS) selects a long-term key from a service principal's HDB entry. If TRUE the KDC picks the strongest supported key from the service principal's current keyset. If FALSE the KDC picks the first supported key from the service principal's current keyset.
Signed-off-by: Love Hörnquist Åstrand <lha@h5l.org>
Signed-off-by: Love Hörnquist Åstrand <lha@h5l.org>
| kdc/default_config.c | diffblobblamehistory | |
| kdc/kdc.h | diffblobblamehistory | |
| kdc/misc.c | diffblobblamehistory | |
| lib/krb5/krb5.conf.5 | diffblobblamehistory |