|
Description
|
If one has an existing KDB (princ DB) protected with the default master key enctype of des-cbc-crc, there is no way to modify the master_key_enctype in kdc.conf, generate a new master key with that enctype and migrate the existing KDB to be protected with the new key. This is not good as our kerberos has been enhanced with support for stronger enctypes which should be used to protect the secret keys stored in the KDB.
xxxxx@xxxxx.com 2005-06-24 00:04:24 GMT
|