[krbdev.mit.edu #9160] git commit

[Greg Hudson via RT]

Thu Feb 06 18:02:26 2025: Request 9160 was acted upon.
 Transaction: Ticket created by ghudson at mit.edu
       Queue: krb5
     Subject: git commit
       Owner: ghudson at mit.edu
  Requestors: 
      Status: new
 Ticket <URL: https://mv-ezproxy-com.ezproxyberklee.flo.org/rt/Ticket/Display.html?id=9160 >



Allow only one salt type per enctype in key data

In the default libkdb5 password change method, omit requested key/salt
combinations that duplicate an earlier encryption type, even if they
have a different salt type.  Any use cases for multiple salts for the
same enctype disappeared with single-DES support.  (We already have
this behavior for chrand requests.)

https://github.com/krb5/krb5/commit/367ccd2fcf8b4adb82bfc7ef9b5f04ff94f80326
Author: Greg Hudson <ghudson at mit.edu>
Commit: 367ccd2fcf8b4adb82bfc7ef9b5f04ff94f80326
Branch: master
 src/lib/kdb/kdb_cpw.c | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)