[debian-edu-commits] r78975 - in branches/wheezy/debian-edu-config: debian share/debian-edu-config/tools

[schweer-guest at alioth.debian.org]

Author: schweer-guest
Date: 2013-02-04 16:22:56 +0000 (Mon, 04 Feb 2013)
New Revision: 78975

Modified:
   branches/wheezy/debian-edu-config/debian/changelog
   branches/wheezy/debian-edu-config/share/debian-edu-config/tools/kerberos-kdc-init
Log:
Drop setting "allow_weak_crypro = true" in /etc/krb5.conf. Thanks
to Andreas B. Mundt for the hint.

Modified: branches/wheezy/debian-edu-config/debian/changelog
===================================================================
--- branches/wheezy/debian-edu-config/debian/changelog	2013-02-04 06:12:47 UTC (rev 78974)
+++ branches/wheezy/debian-edu-config/debian/changelog	2013-02-04 16:22:56 UTC (rev 78975)
@@ -1,3 +1,10 @@
+debian-edu-config (1.703~svn78957+nmu1) UNRELEASED; urgency=low
+
+  * Drop setting "allow_weak_crypro = true" in /etc/krb5.conf. Thanks
+    to Andreas B. Mundt for the hint.
+
+ -- Wolfgang Schweer <wschweer at arcor.de>  Mon, 04 Feb 2013 17:19:04 +0100
+
 debian-edu-config (1.703~svn78957) wheezy-test; urgency=low
 
   [ Wolfgang Schweer ]

Modified: branches/wheezy/debian-edu-config/share/debian-edu-config/tools/kerberos-kdc-init
===================================================================
--- branches/wheezy/debian-edu-config/share/debian-edu-config/tools/kerberos-kdc-init	2013-02-04 06:12:47 UTC (rev 78974)
+++ branches/wheezy/debian-edu-config/share/debian-edu-config/tools/kerberos-kdc-init	2013-02-04 16:22:56 UTC (rev 78975)
@@ -121,8 +121,8 @@
     fi
     cat > /etc/krb5.conf <<EOF
 [libdefaults]
-        ## FIXME: needed because of #521878:
-        allow_weak_crypto = true
+        ## FIXME: setting enctypes still needed due to #521878#24
+#       allow_weak_crypto = true
         permitted_enctypes = des-cbc-crc rc4-hmac des3-cbc-sha1-kd aes128-cts-hmac-sha1-96 aes256-cts-hmac-sha1-96
         default_realm = INTERN
 # Should probably use this in [libdefaults] to look up servers in DNS: