View | Details | Raw Unified | Return to bug 63396
Collapse All | Expand All

(-)./gssapi.3 (-6 / +6 lines)
Lines 106-122 Link Here
106
.Fn gss_get_mic
106
.Fn gss_get_mic
107
/
107
/
108
.Fn gss_verify_mic .
108
.Fn gss_verify_mic .
109
Its possible to modify the behavior of the generator of the MIC with
109
It's possible to modify the behavior of the generator of the MIC with
110
the
110
the
111
.Pa krb5.conf
111
.Pa krb5.conf
112
configuration file so that old clients/servers will still
112
configuration file so that old clients/servers will still
113
work.
113
work.
114
.Pp
114
.Pp
115
New clients/servers will try both the old and new MIC in Heimdal 0.6.
115
New clients/servers will try both the old and new MIC in Heimdal 0.6.
116
In 0.7 it will check only if configured and the compatibility code
116
In 0.7 it will check only if configured (the compatibility code
117
will be removed in 0.8.
117
will be removed in 0.8).
118
.Pp
118
.Pp
119
Heimdal 0.6 still generates by default the broken GSS-API DES3 mic,
119
Heimdal 0.6 still generates by default the broken GSS-API DES3 mic;
120
this will change in 0.7 to generate correct des3 mic.
120
this will change in 0.7 to generate correct des3 mic.
121
.Pp
121
.Pp
122
To turn on compatibility with older clients and servers, change the
122
To turn on compatibility with older clients and servers, change the
Lines 130-136 Link Here
130
.Nm [gssapi]
130
.Nm [gssapi]
131
.Ar correct_des3_mic .
131
.Ar correct_des3_mic .
132
.Pp
132
.Pp
133
If a match for a entry is in both
133
If a match for an entry is in both
134
.Nm [gssapi]
134
.Nm [gssapi]
135
.Ar correct_des3_mic
135
.Ar correct_des3_mic
136
and
136
and
Lines 150-156 Link Here
150
.Sh BUGS
150
.Sh BUGS
151
All of 0.5.x versions of
151
All of 0.5.x versions of
152
.Nm heimdal
152
.Nm heimdal
153
had broken token delegations in the client side, the server side was
153
had broken token delegations in the client side; the server side was
154
correct.
154
correct.
155
.Sh SEE ALSO
155
.Sh SEE ALSO
156
.Xr krb5 3 ,
156
.Xr krb5 3 ,

Return to bug 63396