Re: Deleting only some salt types

["Henry B. Hotz" <hotz@jpl.nasa.gov>]

Thanks!

On Feb 13, 2005, at 7:40 AM, Love wrote:

> I usully change the [kdc]\ndefault_keys= line on the kdc when doing  
> stuff
> like this.

OK.

> "Henry B. Hotz" <hotz@jpl.nasa.gov> writes:
>
>> I still have two keys though, one with the normal pw-salt(), and
>> another with an afs3 salt which I'm sure Windows hasn't a clue about.
>> (Hmmm.  Should be both v4 and v5 salts as well as afs3?  Different
>> issue.)
>
> Windows does have problems with v4 salted password, I think its fixed,  
> but
> not released yet. You really don't need to keep afs3 salted keys  
> around,
> klog also tries v4 s2k since about 10 years ago or so.

I'd noticed that (klog w std salt), but I was uncertain where the  
support was added and didn't want to obsolete anyone directly in the  
kaserver -> Kerb5 upgrade.  I don't mind obsoleting clients that old on  
purpose Real Soon Now, just didn't want to do it as an unnecessary side  
effect.
------------------------------------------------------------------------ 
----
The opinions expressed in this message are mine,
not those of Caltech, JPL, NASA, or the US Government.
Henry.B.Hotz@jpl.nasa.gov, or hbhotz@oxy.edu