Author: rvs
Date: Sun Oct 23 00:30:07 2011
New Revision: 1187835
URL: http://svn.apache.org/viewvc?rev=1187835&view=rev
Log:
BIGTOP-144. kerberos deployment needs to be made compatible with default JRE
crypto setup
Modified:
incubator/bigtop/trunk/bigtop-deploy/puppet/modules/kerberos/templates/krb5.conf
Modified:
incubator/bigtop/trunk/bigtop-deploy/puppet/modules/kerberos/templates/krb5.conf
URL:
http://svn.apache.org/viewvc/incubator/bigtop/trunk/bigtop-deploy/puppet/modules/kerberos/templates/krb5.conf?rev=1187835&r1=1187834&r2=1187835&view=diff
==============================================================================
---
incubator/bigtop/trunk/bigtop-deploy/puppet/modules/kerberos/templates/krb5.conf
(original)
+++
incubator/bigtop/trunk/bigtop-deploy/puppet/modules/kerberos/templates/krb5.conf
Sun Oct 23 00:30:07 2011
@@ -5,11 +5,14 @@
ticket_lifetime = 24h
forwardable = true
udp_preference_limit = 1000000
+ default_tkt_enctypes = des-cbc-md5 des-cbc-crc des3-cbc-sha1
+ default_tgs_enctypes = des-cbc-md5 des-cbc-crc des3-cbc-sha1
+ permitted_enctypes = des-cbc-md5 des-cbc-crc des3-cbc-sha1
[realms]
<%= realm %> = {
- kdc = <%= kdc_server %>.<%= domain %>:<%= kdc_port %>
- admin_server = <%= kdc_server %>.<%= domain %>:<%= admin_port %>
+ kdc = <%= kdc_server %>:<%= kdc_port %>
+ admin_server = <%= kdc_server %>:<%= admin_port %>
default_domain = <%= domain %>
}
