mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2024-12-23 07:33:27 -06:00
bc56642bf9
Add FIPS conditional to updates to prevent updater from adding camellia encsalttypes. Fixes: https://pagure.io/freeipa/issue/8111 Signed-off-by: Christian Heimes <cheimes@redhat.com> Reviewed-By: Rob Crittenden <rcritten@redhat.com>
10 lines
502 B
Plaintext
10 lines
502 B
Plaintext
dn: cn=$REALM,cn=kerberos,$SUFFIX
|
|
${FIPS}add: krbSupportedEncSaltTypes: camellia128-cts-cmac:normal
|
|
${FIPS}add: krbSupportedEncSaltTypes: camellia128-cts-cmac:special
|
|
${FIPS}add: krbSupportedEncSaltTypes: camellia256-cts-cmac:normal
|
|
${FIPS}add: krbSupportedEncSaltTypes: camellia256-cts-cmac:special
|
|
add: krbSupportedEncSaltTypes: aes128-sha2:normal
|
|
add: krbSupportedEncSaltTypes: aes128-sha2:special
|
|
add: krbSupportedEncSaltTypes: aes256-sha2:normal
|
|
add: krbSupportedEncSaltTypes: aes256-sha2:special
|