Comment 5 for bug 512110

>>>>> "J" == J Bruce Fields <email address hidden> writes:

    J> "We're adding an API to krb5 to fix this for OpenAFS. Because of
    J> the way the API is constructed, it's very difficult for GSSD to
    J> actually call it."

    J> Do you have a pointer to the details?

/* Allows the appplication to override the profile's allow_weak_crypto setting.
 * Primarily for use by aklog. */
krb5_error_code KRB5_CALLCONV
krb5_allow_weak_crypto(krb5_context context, krb5_boolean enable);

The problem of course being the need for a krb5 context.