diff options
| author | Russ Allbery <rra@stanford.edu> | 2010-02-09 13:41:11 -0800 |
|---|---|---|
| committer | Russ Allbery <rra@stanford.edu> | 2010-02-09 13:41:11 -0800 |
| commit | cbdc17af5f7a772188638f0057fffd357acbbd38 (patch) | |
| tree | f91b008d523ad9f5cc31ebd632b8e2a1d8d40974 /server | |
| parent | 2d33440272200cad20a5a4c58e5d8aa0dfad9a1f (diff) | |
Use the long enctype name for aes256-cts-hmac-sha1-96
Heimdal requires the full name and doesn't support the short name that
MIT has as an alias. Change the documentation to use the long name
uniformly.
Diffstat (limited to 'server')
| -rwxr-xr-x | server/wallet-backend | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/server/wallet-backend b/server/wallet-backend index 448f175..2b58255 100755 --- a/server/wallet-backend +++ b/server/wallet-backend @@ -558,9 +558,9 @@ Keytab objects support the following attributes: Restricts the generated keytab to a specific set of encryption types. The values of this attribute must be enctype strings recognized by Kerberos -(strings like C<aes256-cts> or C<des-cbc-crc>). Note that the salt should -not be included; since the salt is irrelevant for keytab keys, it will -always be set to C<normal> by the wallet. +(strings like C<aes256-cts-hmac-sha1-96> or C<des-cbc-crc>). Note that +the salt should not be included; since the salt is irrelevant for keytab +keys, it will always be set to C<normal> by the wallet. If this attribute is set, the specified enctype list will be passed to ktadd when get() is called for that keytab. If it is not set, the default set in |