summaryrefslogtreecommitdiff
path: root/NEWS
diff options
context:
space:
mode:
Diffstat (limited to 'NEWS')
-rw-r--r--NEWS8
1 files changed, 8 insertions, 0 deletions
diff --git a/NEWS b/NEWS
index 5ff85d0..165622a 100644
--- a/NEWS
+++ b/NEWS
@@ -2,6 +2,14 @@
wallet 1.1 (unreleased)
+ Fix wallet-rekey on keytabs containing multiple principals. Previous
+ versions assumed one could concatenate keytab files together to make a
+ valid keytab file, which doesn't work with some Kerberos libraries.
+ This caused new keys downloaded for principals after the first to be
+ discarded. As a side effect of this fix, wallet-rekey always appends
+ new keys directly to the existing keytab file, and never creates a
+ backup copy of that file.
+
Fix the code to set enctype restrictions for keytab objects in the
wallet server.