Dave B <botsch@cnf.cornell.edu> writes: > would you please clarify what "yes, indeed" means? Oh, sorry. Yes, you have to use rxkad-kdf and hence need this patch if you want to turn off DES support entirely in your Kerberos KDC. -- Russ Allbery (rra@stanford.edu) <http://www.eyrie.org/~eagle/>