On 15/08/2011, at 7:54 PM, Chris Hecker wrote: > Well, I'm setting the profile in code, so I'll have to patch anyway, but > I'll do the krb5_get_permitted_enctypes() thing, I had a todo to try to > figure out how to get the default out of the context/profile, so at > least it's only hard coded in one place now. :)
I've always tried to make stuff as enctype- (or anything-) agnostic as possible. It always pains me when a protocol is ostensibly extensible but implementations, applications, etc, make assumptions to negate that. -- Luke ________________________________________________ Kerberos mailing list [email protected] https://mailman.mit.edu/mailman/listinfo/kerberos
