[OpenAFS-devel] [FYI] Review of http://k5wiki.kerberos.org/wiki/Projects/Disable_DES ending February 13, 2009

[Harald Barth]

To begin with: Thanks Sam for the notice.

> > And for example the aklog shipped with AFS does require kerberos
> > libraries.  So, for example, in an Ubuntu version in the fairly near
> > future with these defaults, you could get into a situation where aklog
> > failed unless you changed krb5.conf.
> 
> Good to know.  OpenAFS probably should make a note of that in release
> notes.

Use the utilities from heimdal-clients package then. Just be sure to
remove any trash from krb5.conf that you probably don't need anyway if
you put into DNS where to find your KDC.

On the DES issue, read this Heimdal anouncement:
https://list.sics.se/sympa/arc/heimdal-announce/2008-08/msg00001.html

Harald.