Bug#1052962: Use modern key type for MIT Kerberos database master key

Guido Berhoerster <[email protected]>
Newsgroups gmane.linux.skolelinux.devel
Message-ID <f1876a9a-dd5d-cfef-43c3-9e404f50160b__16332.1586720244$1695737750$gmane$org@berhoerster.name>
Package: debian-edu-config
Version: 2.12.36

Currently Kerberos is configured to use des3-hmac-sha1 key types, the 
setting in /etc/krb5kdc/kdc.conf should probably just be removed so a 
sane default value is used. This probably only needs to be changed for
new installations and it is not woth the effort to change existing 
master keys.  However, it is possible to upgrade them if desired.

See 
https://web.mit.edu/kerberos/krb5-latest/doc/admin/advanced/retiring-des.html#the-database-master-key
for details.

-- 
Guido Berhoerster
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.