IntenseWebs/freeipa
3
0
Fork 0
mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2025-01-27 16:46:42 -06:00
Code Issues Packages Projects Releases Wiki Activity
24afb10c30
freeipa/install/updates/50-krbenctypes.update

10 lines
502 B
Plaintext
Raw Normal View History

Add Camellia ciphers to allowed list. https://fedorahosted.org/freeipa/ticket/3749
2013-07-12 10:28:20 -05:00
dn: cn=$REALM,cn=kerberos,$SUFFIX
Block camellia in krbenctypes update in FIPS Add FIPS conditional to updates to prevent updater from adding camellia encsalttypes. Fixes: https://pagure.io/freeipa/issue/8111 Signed-off-by: Christian Heimes <cheimes@redhat.com> Reviewed-By: Rob Crittenden <rcritten@redhat.com>
2019-11-04 03:08:33 -06:00
${FIPS}add: krbSupportedEncSaltTypes: camellia128-cts-cmac:normal
${FIPS}add: krbSupportedEncSaltTypes: camellia128-cts-cmac:special
${FIPS}add: krbSupportedEncSaltTypes: camellia256-cts-cmac:normal
${FIPS}add: krbSupportedEncSaltTypes: camellia256-cts-cmac:special
Enable AES SHA 256 and 384-bit enctypes in Kerberos https://pagure.io/freeipa/issue/8110 Reviewed-By: Christian Heimes <cheimes@redhat.com>
2019-11-01 14:59:42 -05:00
add: krbSupportedEncSaltTypes: aes128-sha2:normal
add: krbSupportedEncSaltTypes: aes128-sha2:special
add: krbSupportedEncSaltTypes: aes256-sha2:normal
add: krbSupportedEncSaltTypes: aes256-sha2:special
Reference in New Issue Copy Permalink