|
Lines 106-122
Link Here
|
| 106 |
.Fn gss_get_mic |
106 |
.Fn gss_get_mic |
| 107 |
/ |
107 |
/ |
| 108 |
.Fn gss_verify_mic . |
108 |
.Fn gss_verify_mic . |
| 109 |
Its possible to modify the behavior of the generator of the MIC with |
109 |
It's possible to modify the behavior of the generator of the MIC with |
| 110 |
the |
110 |
the |
| 111 |
.Pa krb5.conf |
111 |
.Pa krb5.conf |
| 112 |
configuration file so that old clients/servers will still |
112 |
configuration file so that old clients/servers will still |
| 113 |
work. |
113 |
work. |
| 114 |
.Pp |
114 |
.Pp |
| 115 |
New clients/servers will try both the old and new MIC in Heimdal 0.6. |
115 |
New clients/servers will try both the old and new MIC in Heimdal 0.6. |
| 116 |
In 0.7 it will check only if configured and the compatibility code |
116 |
In 0.7 it will check only if configured (the compatibility code |
| 117 |
will be removed in 0.8. |
117 |
will be removed in 0.8). |
| 118 |
.Pp |
118 |
.Pp |
| 119 |
Heimdal 0.6 still generates by default the broken GSS-API DES3 mic, |
119 |
Heimdal 0.6 still generates by default the broken GSS-API DES3 mic; |
| 120 |
this will change in 0.7 to generate correct des3 mic. |
120 |
this will change in 0.7 to generate correct des3 mic. |
| 121 |
.Pp |
121 |
.Pp |
| 122 |
To turn on compatibility with older clients and servers, change the |
122 |
To turn on compatibility with older clients and servers, change the |
|
Lines 130-136
Link Here
|
| 130 |
.Nm [gssapi] |
130 |
.Nm [gssapi] |
| 131 |
.Ar correct_des3_mic . |
131 |
.Ar correct_des3_mic . |
| 132 |
.Pp |
132 |
.Pp |
| 133 |
If a match for a entry is in both |
133 |
If a match for an entry is in both |
| 134 |
.Nm [gssapi] |
134 |
.Nm [gssapi] |
| 135 |
.Ar correct_des3_mic |
135 |
.Ar correct_des3_mic |
| 136 |
and |
136 |
and |
|
Lines 150-156
Link Here
|
| 150 |
.Sh BUGS |
150 |
.Sh BUGS |
| 151 |
All of 0.5.x versions of |
151 |
All of 0.5.x versions of |
| 152 |
.Nm heimdal |
152 |
.Nm heimdal |
| 153 |
had broken token delegations in the client side, the server side was |
153 |
had broken token delegations in the client side; the server side was |
| 154 |
correct. |
154 |
correct. |
| 155 |
.Sh SEE ALSO |
155 |
.Sh SEE ALSO |
| 156 |
.Xr krb5 3 , |
156 |
.Xr krb5 3 , |