>>>>>"AD" == Andrew Deason <adea...@sinenomine.net> writes: AD> (And is this still needed on the newest OS X? Is there a point where AD> we can get rid of shipping that file and just rely on the relevant AD> libkrb5 call?)
The functionality that krb5-weak.conf tries to achieve won't be needed on OS X from Yosemite (10.10) on forwards, since Yosemite's Kerberos removes the support for 1-DES encryption types and thus allow_weak_crypto does not have any effect whatsoever. (We know this because of testing the beta versions and talking to Apple; this is one reason why we are in the process of rxkad'ing our AFS.) -- Marcus _______________________________________________ OpenAFS-devel mailing list OpenAFS-devel@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-devel
