Bug 613317

Summary:	Kerberos client now requires new option for weak crypto
Product:	Red Hat Enterprise Linux 6	Reporter:	Miroslav Vadkerti <mvadkert>
Component:	doc-Migration_Guide	Assignee:	Laura Bailey <lbailey>
Status:	CLOSED NEXTRELEASE	QA Contact:	ecs-bugs
Severity:	medium	Docs Contact:
Priority:	medium
Version:	6.0	Keywords:	Documentation
Target Milestone:	rc
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2010-07-11 23:11:01 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Miroslav Vadkerti 2010-07-10 18:38:50 UTC

Description of problem:
Kerberos client now requires allow_weak_crypto option in libdefaults section for connections that authenticate with server using weak cryptography. If this option is not present, the authentication fails. This should be documented as it can cause confusion when migrating clients to RHEL6.

[libdefaults]
allow_weak_crypto = yes

Comment 1 Scott Radvan 2010-07-11 23:11:01 UTC

Thanks, have added this to the Migration Guide. It will appear on the next publish.