Re: Bug#629276: NFS needs same dispensation to use DES as AFS
On Sat, 2011-06-18 at 00:16 +0200, Philipp Kern wrote:
> On Fri, Jun 17, 2011 at 09:51:30PM +0200, Sergio Gelato wrote:
> > It is true that you can enable the enctypes for all principals by adding
> > [libdefaults]
> > allow_weak_crypto = true
> > to /etc/heimdal-kdc/kdc.conf, but that's a very blunt tool since only a
> > few principals still need an exemption from the "no DES" policy. For my
> > own operations I'll definitely stick with my patch. A more universal
> > solution would be to make the exception list configurable without
> > recompiling the KDC, but that has to be balanced against the likely
> > complexity of such a change.
>
> So for some reason I thought the patch was more involved. So yeah, you
> can update that through proposed-updates. If it misses the next point
> release we can also push it through squeeze-updates, I think.
The patch itself is indeed fairly small, but the changes to the package
which was uploaded to p-u-NEW aren't quite so tiny. Specifically, the
diff includes this auto-patch:
patches/debian-changes-1.4.0~git20100726.dfsg.1-2 | 2171 ++++++++++++++++++++++
which includes copies of several auto-generated files, which one
presumes are generated during the build process and as such shouldn't
end up in the source package at all?
Regards,
Adam
Reply to: