[OpenAFS] Heimdal KDC bug mentioned in rekeying document

stephen@physics.unc.edu stephen@physics.unc.edu
Thu, 25 Jul 2013 09:11:38 -0400 (EDT)


Hi,

In the cell rekeying instructions found at 
<http://openafs.org/pages/security/how-to-rekey.txt>, there is a note for 
sites using Heimdal KDCs. It mentions a bug present in "certain versions" 
of the Heimdal KDC software which completely disables DES on the AFS 
service principal when following the document's instructions.

Is more information available about specific versions of the Heimdal KDC 
software which exhibits this bug? The document mentions experimentally 
verifying ticket acquisition, which seems wise. But also knowing the KDC 
versions which have the bug would be beneficial.

Anyone have this info? Should I post to a heimdal list instead?

Cheers,
Stephen