From f93a56f931e91c7b8eeec83b94015604bbc898f1 Mon Sep 17 00:00:00 2001 From: Nicolas Williams Date: Mon, 30 May 2011 22:32:16 -0500 Subject: [PATCH] Set improved enctypes parameter defaults to better match the RFC. MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Signed-off-by: Love Hörnquist Åstrand --- kdc/default_config.c | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/kdc/default_config.c b/kdc/default_config.c index 53e024a1d..fe977ded5 100644 --- a/kdc/default_config.c +++ b/kdc/default_config.c @@ -51,10 +51,10 @@ krb5_kdc_get_config(krb5_context context, krb5_kdc_configuration **config) c->require_preauth = TRUE; c->kdc_warn_pwexpire = 0; c->encode_as_rep_as_tgs_rep = FALSE; - c->as_use_strongest_session_key = TRUE; - c->preauth_use_strongest_session_key = TRUE; - c->tgs_use_strongest_session_key = TRUE; - c->use_strongest_server_key = TRUE; + c->as_use_strongest_session_key = FALSE; + c->preauth_use_strongest_session_key = FALSE; + c->tgs_use_strongest_session_key = FALSE; + c->use_strongest_server_key = FALSE; c->check_ticket_addresses = TRUE; c->allow_null_ticket_addresses = TRUE; c->allow_anonymous = FALSE;