kdc-model-12 - enctypes

Hi,
In section 4.1.1.13 (principalAllowedEnctype) one reads:
"If empty or absent any enctype supported by the implementation is  
allowed for this Principal".
The problem here is that the "implementation" may have a wide range of  
the enctypes, say, the flavors of des, aes, camellia. On the other  
hand, KDC might be configured to use only aes, meaning that neither  
des nor camellia would not be allowed for this Principal. right?

Also, this revision is still missing the explicit reference to "time  
and date" in the sections 4.1.1.2 (principalNotUsedBefore), 4.1.1.3  
(principalNotUseAfter), 4.3.1.5 (keyNotUsedBefore) and 4.3.1.6  
(keyNotUsedAfter).

Thanks,
Zhanna




_______________________________________________
ietf-krb-wg mailing list
[email protected]
https://lists.anl.gov/mailman/listinfo/ietf-krb-wg