From 45158c861e17aae70b5e5f3f980797afa6c51272 Mon Sep 17 00:00:00 2001 From: Love Hornquist Astrand Date: Wed, 2 Jun 2010 08:14:47 -0700 Subject: [PATCH] document allow_weak_crypto --- lib/krb5/krb5.conf.5 | 3 +++ 1 file changed, 3 insertions(+) diff --git a/lib/krb5/krb5.conf.5 b/lib/krb5/krb5.conf.5 index 613946518..93a2201ee 100644 --- a/lib/krb5/krb5.conf.5 +++ b/lib/krb5/krb5.conf.5 @@ -143,6 +143,9 @@ Default realm to use, this is also known as your .Dq local realm . The default is the result of .Fn krb5_get_host_realm "local hostname" . +.It Li allow_weak_crypto = Va boolean +is weaks crypto algorithms allowed to be used, among others, DES is +considered weak. .It Li clockskew = Va time Maximum time differential (in seconds) allowed when comparing times.