KRB: do not set keytab by default.

Only enable decryption if a user purposefully sets a keytab.
This commit is contained in:
Johanna Amann 2018-06-01 12:46:26 -07:00
parent 8bb76cd3c1
commit 327acf6555
5 changed files with 26 additions and 1 deletions

View file

@ -4245,7 +4245,8 @@ export {
module KRB;
export {
const keytab = "/etc/krb5.keytab" &redef;
## Kerberos keytab file name. Used to decrypt tickets encountered on the wire.
const keytab = "" &redef;
## KDC Options. See :rfc:`4120`
type KRB::KDC_Options: record {
## The ticket to be issued should have its forwardable flag set.