[Bug 900447] [NEW] Man 5 page for kdc.conf does not mention acceptable encryption types
Public bug reported:
Hi
It would be helpful if the man 5 page for kdc.conf could explicitly
specify the acceptable encryption types we can use.
Currently the only way is looking at the source code in the following file:
/krb5-1.9.1+dfsg/src/lib/crypto/krb/etypes.c
grep ENCTYPE_ ./krb5-1.9.1+dfsg/src/lib/crypto/krb/etypes.c
{ ENCTYPE_DES_CBC_CRC,
{ ENCTYPE_DES_CBC_MD4,
{ ENCTYPE_DES_CBC_MD5,
{ ENCTYPE_DES_CBC_RAW,
{ ENCTYPE_DES3_CBC_RAW,
{ ENCTYPE_DES3_CBC_SHA1,
{ ENCTYPE_DES_HMAC_SHA1,
{ ENCTYPE_ARCFOUR_HMAC,
{ ENCTYPE_ARCFOUR_HMAC_EXP,
{ ENCTYPE_AES128_CTS_HMAC_SHA1_96,
{ ENCTYPE_AES256_CTS_HMAC_SHA1_96,
{ ENCTYPE_CAMELLIA128_CTS_CMAC,
{ ENCTYPE_CAMELLIA256_CTS_CMAC,
Leonardo
ProblemType: Bug
DistroRelease: Ubuntu 11.10
Package: krb5-kdc 1.9.1+dfsg-1ubuntu2.1
Uname: Linux 3.2.0-999-generic x86_64
ApportVersion: 1.23-0ubuntu4
Architecture: amd64
Date: Mon Dec 5 14:31:49 2011
ProcEnviron:
LANGUAGE=en_US:
LANG=en_US
SHELL=/bin/bash
SourcePackage: krb5
UpgradeStatus: No upgrade log present (probably fresh install)
** Affects: krb5 (Ubuntu)
Importance: Undecided
Status: New
** Tags: amd64 apport-bug oneiric
--
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to krb5 in Ubuntu.
https://bugs.launchpad.net/bugs/900447
Title:
Man 5 page for kdc.conf does not mention acceptable encryption types
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/krb5/+bug/900447/+subscriptions
--
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at:
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
Re: [Bug 900447] [NEW] Man 5 page for kdc.conf does not mention acceptable encryption types
Leonardo Borda 900...@bugs.launchpad.net writes: It would be helpful if the man 5 page for kdc.conf could explicitly specify the acceptable encryption types we can use. Currently the only way is looking at the source code in the following file: /krb5-1.9.1+dfsg/src/lib/crypto/krb/etypes.c They're listed in the krb5-admin info pages included in krb5-doc under Configuration Files. -- Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle/ -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to krb5 in Ubuntu. https://bugs.launchpad.net/bugs/900447 Title: Man 5 page for kdc.conf does not mention acceptable encryption types To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/krb5/+bug/900447/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
Re: [Bug 900447] [NEW] Man 5 page for kdc.conf does not mention acceptable encryption types
Russ, I thought that they were listed in the admin info pages too. however, while I see a bunch of examples, searching for the string hmac in the sources to the admin guide, I don't actually find a complete list of the encryption types anywhere. Am I missing something? -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to krb5 in Ubuntu. https://bugs.launchpad.net/bugs/900447 Title: Man 5 page for kdc.conf does not mention acceptable encryption types To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/krb5/+bug/900447/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
Re: [Bug 900447] [NEW] Man 5 page for kdc.conf does not mention acceptable encryption types
Sam Hartman hartm...@debian.org writes: Russ, I thought that they were listed in the admin info pages too. however, while I see a bunch of examples, searching for the string hmac in the sources to the admin guide, I don't actually find a complete list of the encryption types anywhere. Am I missing something? They could be in definitions.texinfo or or support-enc.texinfo. -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to krb5 in Ubuntu. https://bugs.launchpad.net/bugs/900447 Title: Man 5 page for kdc.conf does not mention acceptable encryption types To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/krb5/+bug/900447/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
Re: [Bug 900447] [NEW] Man 5 page for kdc.conf does not mention acceptable encryption types
They are in fact in support-enc.texinfo. OK. So, to the extent there is a bug it's that kdc.conf's manpage doesn't tell you to go look at the admin guide. I don't think we want to duplicate the information. -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to krb5 in Ubuntu. https://bugs.launchpad.net/bugs/900447 Title: Man 5 page for kdc.conf does not mention acceptable encryption types To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/krb5/+bug/900447/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 900447] [NEW] Man 5 page for kdc.conf does not mention acceptable encryption types
Public bug reported:
Hi
It would be helpful if the man 5 page for kdc.conf could explicitly
specify the acceptable encryption types we can use.
Currently the only way is looking at the source code in the following file:
/krb5-1.9.1+dfsg/src/lib/crypto/krb/etypes.c
grep ENCTYPE_ ./krb5-1.9.1+dfsg/src/lib/crypto/krb/etypes.c
{ ENCTYPE_DES_CBC_CRC,
{ ENCTYPE_DES_CBC_MD4,
{ ENCTYPE_DES_CBC_MD5,
{ ENCTYPE_DES_CBC_RAW,
{ ENCTYPE_DES3_CBC_RAW,
{ ENCTYPE_DES3_CBC_SHA1,
{ ENCTYPE_DES_HMAC_SHA1,
{ ENCTYPE_ARCFOUR_HMAC,
{ ENCTYPE_ARCFOUR_HMAC_EXP,
{ ENCTYPE_AES128_CTS_HMAC_SHA1_96,
{ ENCTYPE_AES256_CTS_HMAC_SHA1_96,
{ ENCTYPE_CAMELLIA128_CTS_CMAC,
{ ENCTYPE_CAMELLIA256_CTS_CMAC,
Leonardo
ProblemType: Bug
DistroRelease: Ubuntu 11.10
Package: krb5-kdc 1.9.1+dfsg-1ubuntu2.1
Uname: Linux 3.2.0-999-generic x86_64
ApportVersion: 1.23-0ubuntu4
Architecture: amd64
Date: Mon Dec 5 14:31:49 2011
ProcEnviron:
LANGUAGE=en_US:
LANG=en_US
SHELL=/bin/bash
SourcePackage: krb5
UpgradeStatus: No upgrade log present (probably fresh install)
** Affects: krb5 (Ubuntu)
Importance: Undecided
Status: New
** Tags: amd64 apport-bug oneiric
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/900447
Title:
Man 5 page for kdc.conf does not mention acceptable encryption types
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/krb5/+bug/900447/+subscriptions
--
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
Re: [Bug 900447] [NEW] Man 5 page for kdc.conf does not mention acceptable encryption types
Leonardo Borda 900...@bugs.launchpad.net writes: It would be helpful if the man 5 page for kdc.conf could explicitly specify the acceptable encryption types we can use. Currently the only way is looking at the source code in the following file: /krb5-1.9.1+dfsg/src/lib/crypto/krb/etypes.c They're listed in the krb5-admin info pages included in krb5-doc under Configuration Files. -- Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle/ -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/900447 Title: Man 5 page for kdc.conf does not mention acceptable encryption types To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/krb5/+bug/900447/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
Re: [Bug 900447] [NEW] Man 5 page for kdc.conf does not mention acceptable encryption types
Russ, I thought that they were listed in the admin info pages too. however, while I see a bunch of examples, searching for the string hmac in the sources to the admin guide, I don't actually find a complete list of the encryption types anywhere. Am I missing something? -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/900447 Title: Man 5 page for kdc.conf does not mention acceptable encryption types To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/krb5/+bug/900447/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
Re: [Bug 900447] [NEW] Man 5 page for kdc.conf does not mention acceptable encryption types
Sam Hartman hartm...@debian.org writes: Russ, I thought that they were listed in the admin info pages too. however, while I see a bunch of examples, searching for the string hmac in the sources to the admin guide, I don't actually find a complete list of the encryption types anywhere. Am I missing something? They could be in definitions.texinfo or or support-enc.texinfo. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/900447 Title: Man 5 page for kdc.conf does not mention acceptable encryption types To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/krb5/+bug/900447/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
Re: [Bug 900447] [NEW] Man 5 page for kdc.conf does not mention acceptable encryption types
They are in fact in support-enc.texinfo. OK. So, to the extent there is a bug it's that kdc.conf's manpage doesn't tell you to go look at the admin guide. I don't think we want to duplicate the information. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/900447 Title: Man 5 page for kdc.conf does not mention acceptable encryption types To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/krb5/+bug/900447/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
