mirror of
https://github.com/zeek/zeek.git
synced 2025-10-07 09:08:20 +00:00
KRB: do not set keytab by default.
Only enable decryption if a user purposefully sets a keytab.
This commit is contained in:
parent
8bb76cd3c1
commit
327acf6555
5 changed files with 26 additions and 1 deletions
|
@ -4245,7 +4245,8 @@ export {
|
|||
|
||||
module KRB;
|
||||
export {
|
||||
const keytab = "/etc/krb5.keytab" &redef;
|
||||
## Kerberos keytab file name. Used to decrypt tickets encountered on the wire.
|
||||
const keytab = "" &redef;
|
||||
## KDC Options. See :rfc:`4120`
|
||||
type KRB::KDC_Options: record {
|
||||
## The ticket to be issued should have its forwardable flag set.
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue