Bug#741051: krb5-config's krb5.conf template is crufty

2014-03-21 Thread Russ Allbery
Sam Hartman hartm...@debian.org writes: I wonder if we can support /etc/krb5.conf.d. I guess the big question is whether Heimdal supports that. I just checked, and so far as I can tell, it does not. -- Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle/ -- To

Bug#741051: krb5-config's krb5.conf template is crufty

2014-03-10 Thread Sam Hartman
1) please make sure you're right for domain_realms both for MIT and Heimdal; the leading dot used to not be implied by not leading dot. 2) I think mentioning the enctypes entries in comments is valuable but I think having uncommenting entries is undesirable. Besides that decrufting is good. I

Bug#741051: krb5-config's krb5.conf template is crufty

2014-03-10 Thread Russ Allbery
Sam Hartman hartm...@debian.org writes: I wonder if we can support /etc/krb5.conf.d. I guess the big question is whether Heimdal supports that. I'm not sure that it does yet, but it would be really nice if it did. There is a configuration fragment for pam-krb5 that I'd love to be able to

Bug#741051: krb5-config's krb5.conf template is crufty

2014-03-07 Thread Benjamin Kaduk
Package: krb5-config Version: 2.3 The /etc/krb5.conf that is produced by krb5-config has a lot of things which are no longer useful. A few examples in particular: It contains settings that were only used for krb4, but krb4 is no longer supported. It specifies a port number for kdc entries

Bug#741051: krb5-config's krb5.conf template is crufty

2014-03-07 Thread Russ Allbery
Benjamin Kaduk ka...@mit.edu writes: The /etc/krb5.conf that is produced by krb5-config has a lot of things which are no longer useful. A few examples in particular: It contains settings that were only used for krb4, but krb4 is no longer supported. It specifies a port number for kdc