- Package:
- debian-edu-config
- Source:
- debian-edu-config
- Submitter:
- Guido Berhoerster
- Date:
- 2026-09-04 21:55:02 UTC
- Severity:
- normal
- Tags:
Currently Kerberos is configured to use des3-hmac-sha1 key types, the setting in /etc/krb5kdc/kdc.conf should probably just be removed so a sane default value is used. This probably only needs to be changed for new installations and it is not woth the effort to change existing master keys. However, it is possible to upgrade them if desired. See https://web.mit.edu/kerberos/krb5-latest/doc/admin/advanced/retiring-des.html#the-database-master-key for details.
Hello, Bug #1052962 in debian-edu-config reported by you has been fixed in the Git repository and is awaiting an upload. You can see the commit message below and you can check the diff of the fix at: https://salsa.debian.org/debian-edu/debian-edu-config/-/commit/53d9b25cbba40d52e2ac65964a57bffca571c37d ------------------------------------------------------------------------ share/debian-edu-config/tools/kerberos-kdc-init: Don't hard-code master_key_type, use MIT/Kerberos' default. (Closes: #1052962). ------------------------------------------------------------------------ (this message was generated automatically) -- Greetings https://bugs.debian.org/1052962
Hello, Bug #1052962 in debian-edu-config reported by you has been fixed in the Git repository and is awaiting an upload. You can see the commit message below and you can check the diff of the fix at: https://salsa.debian.org/debian-edu/debian-edu-config/-/commit/18d340a3e63039b19dfc5a65c5774237e98f97d4 ------------------------------------------------------------------------ share/debian-edu-config/tools/kerberos-kdc-init: Don't hard-code master_key_type, use MIT/Kerberos' default. (Closes: #1052962). ------------------------------------------------------------------------ (this message was generated automatically) -- Greetings https://bugs.debian.org/1052962
Hello, Bug #1052962 in debian-edu-config reported by you has been fixed in the Git repository and is awaiting an upload. You can see the commit message below and you can check the diff of the fix at: https://salsa.debian.org/debian-edu/debian-edu-config/-/commit/18d340a3e63039b19dfc5a65c5774237e98f97d4 ------------------------------------------------------------------------ share/debian-edu-config/tools/kerberos-kdc-init: Don't hard-code master_key_type, use MIT/Kerberos' default. (Closes: #1052962). ------------------------------------------------------------------------ (this message was generated automatically) -- Greetings https://bugs.debian.org/1052962
Hello, Bug #1052962 in debian-edu-config reported by you has been fixed in the Git repository and is awaiting an upload. You can see the commit message below and you can check the diff of the fix at: https://salsa.debian.org/debian-edu/debian-edu-config/-/commit/18d340a3e63039b19dfc5a65c5774237e98f97d4 ------------------------------------------------------------------------ share/debian-edu-config/tools/kerberos-kdc-init: Don't hard-code master_key_type, use MIT/Kerberos' default. (Closes: #1052962). ------------------------------------------------------------------------ (this message was generated automatically) -- Greetings https://bugs.debian.org/1052962
Hello, Bug #1052962 in debian-edu-config reported by you has been fixed in the Git repository and is awaiting an upload. You can see the commit message below and you can check the diff of the fix at: https://salsa.debian.org/debian-edu/debian-edu-config/-/commit/18d340a3e63039b19dfc5a65c5774237e98f97d4 ------------------------------------------------------------------------ share/debian-edu-config/tools/kerberos-kdc-init: Don't hard-code master_key_type, use MIT/Kerberos' default. (Closes: #1052962). ------------------------------------------------------------------------ (this message was generated automatically) -- Greetings https://bugs.debian.org/1052962
Hello, Bug #1052962 in debian-edu-config reported by you has been fixed in the Git repository and is awaiting an upload. You can see the commit message below and you can check the diff of the fix at: https://salsa.debian.org/debian-edu/debian-edu-config/-/commit/18d340a3e63039b19dfc5a65c5774237e98f97d4 ------------------------------------------------------------------------ share/debian-edu-config/tools/kerberos-kdc-init: Don't hard-code master_key_type, use MIT/Kerberos' default. (Closes: #1052962). ------------------------------------------------------------------------ (this message was generated automatically) -- Greetings https://bugs.debian.org/1052962
Hello, Bug #1052962 in debian-edu-config reported by you has been fixed in the Git repository and is awaiting an upload. You can see the commit message below and you can check the diff of the fix at: https://salsa.debian.org/debian-edu/debian-edu-config/-/commit/18d340a3e63039b19dfc5a65c5774237e98f97d4 ------------------------------------------------------------------------ share/debian-edu-config/tools/kerberos-kdc-init: Don't hard-code master_key_type, use MIT/Kerberos' default. (Closes: #1052962). ------------------------------------------------------------------------ (this message was generated automatically) -- Greetings https://bugs.debian.org/1052962
We believe that the bug you reported is fixed in the latest version of
debian-edu-config, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 1052962@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Mike Gabriel <sunweaver@debian.org> (supplier of updated debian-edu-config package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Fri, 04 Sep 2026 23:35:24 +0200
Source: debian-edu-config
Architecture: source
Version: 2.13.2
Distribution: unstable
Urgency: medium
Maintainer: Debian Edu Developers <debian-edu@lists.debian.org>
Changed-By: Mike Gabriel <sunweaver@debian.org>
Closes: 703710 1051836 1052962 1092123 1146398
Changes:
debian-edu-config (2.13.2) unstable; urgency=medium
.
[ Serhii Horichenko ]
* share/debian-edu-config/tools/run-at-firstboot:
- Add an environment check to avoid starting the image creation on
an LTSP-client (Closes: #1092123).
- Add an ability to create a Diskless Workstation chroot and separate
the creation of an image on an LTSP-server without the Main-Server
role (Closes: #1092123).
.
[ Mike Gabriel ]
* sbin/debian-edu-ltsp-install:
- When creating a DLW, set PROFILE to 'Workstation' (Closes: #1092123).
* share/debian-edu-config/tools/kerberos-kdc-init:
- Don't hard-code master_key_type, use MIT/Kerberos' default. (Closes:
#1052962).
* Stop using killer script in Debian Edu. (Closes: #703710).
* cf3/cf.ldapclient:
- Ensure empty file /etc/netgroup exists. (Closes: #1146398).
* exim4/exim-ldap-{server,client}-v4.conf:
- Write logs to syslog. (Closes: #1051836).
* run-at-firstboot:
- Initialize first user's mailbox only when logging into Main-Server.
Checksums-Sha1:
772b9343dcdd45212cc6706e2656481825dd4379 1978 debian-edu-config_2.13.2.dsc
bd05dad205e2a4cbea9b32be0857f9d752ee2b05 365076 debian-edu-config_2.13.2.tar.xz
e43d6aef60c286093e384f87ac46325332ae0c1a 6689 debian-edu-config_2.13.2_source.buildinfo
Checksums-Sha256:
c4d62b035540a8dfd25ece25b1d767e93fd054af05ca9d65e4779c8d4f8eed8e 1978 debian-edu-config_2.13.2.dsc
49961c139ce0454779c88596e1ee9177d5696f593f2cac87f3fdf333698d2503 365076 debian-edu-config_2.13.2.tar.xz
ee7b9f7f76910bd071bd7fc9dbaa81f8d93fca8f29f9bf6676536da74860915b 6689 debian-edu-config_2.13.2_source.buildinfo
Files:
6c7d1dba6c2a179c5881c437514867b3 1978 misc optional debian-edu-config_2.13.2.dsc
ec292a552ec95ce405fdbd77ecafe53c 365076 misc optional debian-edu-config_2.13.2.tar.xz
066e86db7eaf5fa58cc75d1cb028ccd8 6689 misc optional debian-edu-config_2.13.2_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=VDYv
-----END PGP SIGNATURE-----