From 1e3276cec1fa9415a4486e49811c8b71b07e90ae Mon Sep 17 00:00:00 2001
From: Simo Sorce <ssorce@redhat.com>
Date: Fri, 25 Apr 2008 14:06:24 -0400
Subject: [PATCH] Make sure recent ldapmodify tool (as in F9) do not complain
 by splitting the operation into 2 modify operations

---
 ipa-server/ipa-install/share/default-keytypes.ldif | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/ipa-server/ipa-install/share/default-keytypes.ldif b/ipa-server/ipa-install/share/default-keytypes.ldif
index 9cafacd35..1d54a0596 100644
--- a/ipa-server/ipa-install/share/default-keytypes.ldif
+++ b/ipa-server/ipa-install/share/default-keytypes.ldif
@@ -11,6 +11,11 @@ krbSupportedEncSaltTypes: des-cbc-md5:normal
 krbSupportedEncSaltTypes: des-cbc-crc:normal
 krbSupportedEncSaltTypes: des-cbc-crc:v4
 krbSupportedEncSaltTypes: des-cbc-crc:afs3
+
+#kerberos keytypes
+dn: cn=$REALM,cn=kerberos,$SUFFIX
+changetype: modify
+add: krbDefaultEncSaltTypes
 krbDefaultEncSaltTypes: aes256-cts:normal
 krbDefaultEncSaltTypes: aes128-cts:normal
 krbDefaultEncSaltTypes: des3-hmac-sha1:normal