Comment 11 for bug 1981697

Revision history for this message
Andreas Hasenack (ahasenack) wrote :

# Jammy verification (continuation)

b) Fresh install of proposed packages
$ apt-cache policy krb5-kdc
krb5-kdc:
  Installed: 1.19.2-2ubuntu0.2
  Candidate: 1.19.2-2ubuntu0.2
  Version table:
 *** 1.19.2-2ubuntu0.2 500
        500 http://br.archive.ubuntu.com/ubuntu jammy-proposed/universe amd64 Packages
(...)

Master key type changed, but commented:

$ sudo grep master_key_type /etc/krb5kdc/kdc.conf
        #master_key_type = aes256-cts

Actual algorithm used for it is now aes256-cts-hmac-sha1-96:

$ sudo klist -ke /etc/krb5kdc/stash
Keytab name: FILE:/etc/krb5kdc/stash
KVNO Principal
---- --------------------------------------------------------------------------
   1 K/M@LXD (aes256-cts-hmac-sha1-96)

Jammy verification succeeded.