On Sat, 2011-06-18 at 00:16 +0200, Philipp Kern wrote: > On Fri, Jun 17, 2011 at 09:51:30PM +0200, Sergio Gelato wrote: > > It is true that you can enable the enctypes for all principals by adding > > [libdefaults] > > allow_weak_crypto = true > > to /etc/heimdal-kdc/kdc.conf, but that's a very blunt tool since only a > > few principals still need an exemption from the "no DES" policy. For my > > own operations I'll definitely stick with my patch. A more universal > > solution would be to make the exception list configurable without > > recompiling the KDC, but that has to be balanced against the likely > > complexity of such a change. > > So for some reason I thought the patch was more involved. So yeah, you > can update that through proposed-updates. If it misses the next point > release we can also push it through squeeze-updates, I think.
The patch itself is indeed fairly small, but the changes to the package which was uploaded to p-u-NEW aren't quite so tiny. Specifically, the diff includes this auto-patch: patches/debian-changes-1.4.0~git20100726.dfsg.1-2 | 2171 ++++++++++++++++++++++ which includes copies of several auto-generated files, which one presumes are generated during the build process and as such shouldn't end up in the source package at all? Regards, Adam -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org