Package: krb5-admin-server Version: 1.10.1+dfsg-5+deb7u1 Severity: normal Dear Maintainer,
MIT documentation for version 1.10 of kdc.conf states that "The string DEFAULT can be used to refer to the default set of types for the variable in question. Types or families can be removed from the current list by prefixing them with a minus sign (“-”). Types or families can be prefixed with a plus sign (“+”) for symmetry; it has the same meaning as just listing the type or family. For example, “DEFAULT -des” would be the default set of encryption types with DES types removed, and “des3 DEFAULT” would be the default set of encryption types with triple DES types moved to the front. http://web.mit.edu/kerberos/krb5-current/doc/admin/conf_files/kdc_conf.html#encryption-and-salt-types However using supported_enctypes = DEFAULT in kdc.conf results in kadmind failing with "kadmind: Required parameters in kdc.conf missing while initializing, aborting" The server does start with any other encryption type specified before the word DEFAULT. E.g. supported_enctypes = des3-cbc-raw:normal DEFAULT Will let the server start without errors, as well a nonsense encryption type like: supported_enctypes = des3-cbc-raw:normal dog So, it probably the case that DEFAULT is just ignored if it is not the first encryption type. Thanks, C. -- System Information: Debian Release: 7.2 APT prefers stable-updates APT policy: (500, 'stable-updates'), (500, 'stable') Architecture: amd64 (x86_64) Kernel: Linux 3.2.0-4-amd64 (SMP w/1 CPU core) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Versions of packages krb5-admin-server depends on: ii debconf [debconf-2.0] 1.5.49 ii krb5-kdc 1.10.1+dfsg-5+deb7u1 ii libc6 2.13-38 ii libcomerr2 1.42.5-1.1 ii libgssapi-krb5-2 1.10.1+dfsg-5+deb7u1 ii libgssrpc4 1.10.1+dfsg-5+deb7u1 ii libk5crypto3 1.10.1+dfsg-5+deb7u1 ii libkadm5srv-mit8 1.10.1+dfsg-5+deb7u1 ii libkdb5-6 1.10.1+dfsg-5+deb7u1 ii libkeyutils1 1.5.5-3 ii libkrb5-3 1.10.1+dfsg-5+deb7u1 ii libkrb5support0 1.10.1+dfsg-5+deb7u1 ii libss2 1.42.5-1.1 ii libverto1 0.2.2-1 ii lsb-base 4.1+Debian8+deb7u1 krb5-admin-server recommends no packages. krb5-admin-server suggests no packages. -- debconf information excluded -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
