Re: kdc-model-12 - enctypes

>>>>> "Zhanna" == Zhanna Tsitkov <[email protected]> writes:

    Zhanna> Hi,
    Zhanna> In section 4.1.1.13 (principalAllowedEnctype) one reads:
    Zhanna> "If empty or absent any enctype supported by the implementation is
    Zhanna> allowed for this Principal".
    Zhanna> The problem here is that the "implementation" may have a wide range of
    Zhanna> the enctypes, say, the flavors of des, aes, camellia. On the other
    Zhanna> hand, KDC might be configured to use only aes, meaning that neither
    Zhanna> des nor camellia would not be allowed for this Principal. right?

I certainly assume that's what is intended. One easy fi x would be to
replace supported with permitted.
_______________________________________________
ietf-krb-wg mailing list
[email protected]
https://lists.anl.gov/mailman/listinfo/ietf-krb-wg