>>>>> "J" == J Bruce Fields <email address hidden> writes:
J> "We're adding an API to krb5 to fix this for OpenAFS. Because of
J> the way the API is constructed, it's very difficult for GSSD to
J> actually call it."
J> Do you have a pointer to the details?
/* Allows the appplication to override the profile's allow_weak_crypto setting.
* Primarily for use by aklog. */
krb5_allow_weak_crypto(krb5_context context, krb5_boolean enable);
The problem of course being the need for a krb5 context.