From dd9fd0971f352e4bed50b79b8b3147d6a94956b7 Mon Sep 17 00:00:00 2001 From: Rob Crittenden Date: Mon, 1 Jul 2019 14:40:00 -0400 Subject: [PATCH] Remove DES3 and RC4 enctypes from Kerberos These are already marked as deprecated by the KDC. Reviewed-By: Robbie Harwood Reviewed-By: Alexander Bokovoy --- install/share/kerberos.ldif | 4 ---- 1 file changed, 4 deletions(-) diff --git a/install/share/kerberos.ldif b/install/share/kerberos.ldif index b7772d2ac..b96399e91 100644 --- a/install/share/kerberos.ldif +++ b/install/share/kerberos.ldif @@ -18,10 +18,6 @@ krbSupportedEncSaltTypes: aes256-cts:normal krbSupportedEncSaltTypes: aes256-cts:special krbSupportedEncSaltTypes: aes128-cts:normal krbSupportedEncSaltTypes: aes128-cts:special -${FIPS}krbSupportedEncSaltTypes: des3-hmac-sha1:normal -${FIPS}krbSupportedEncSaltTypes: des3-hmac-sha1:special -${FIPS}krbSupportedEncSaltTypes: arcfour-hmac:normal -${FIPS}krbSupportedEncSaltTypes: arcfour-hmac:special ${FIPS}krbSupportedEncSaltTypes: camellia128-cts-cmac:normal ${FIPS}krbSupportedEncSaltTypes: camellia128-cts-cmac:special ${FIPS}krbSupportedEncSaltTypes: camellia256-cts-cmac:normal