Mailing-List: contact dev-help@directory.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "Apache Directory Developers List" <dev@directory.apache.org>
Date: Wed, 18 Nov 2015 04:58:11 +0000 (UTC)
From: "Xu Yaning (JIRA)" <jira@apache.org>
To: dev@directory.apache.org
Message-ID: <JIRA.28811.1102368382000.102032.1447822691035@Atlassian.JIRA>
In-Reply-To: <JIRA.28811.1102368382000@Atlassian.JIRA>
References: <JIRA.28811.1102368382000@Atlassian.JIRA>
 <JIRA.28811.1102368382000@arcas>
Subject: [jira] [Issue Comment Deleted] (DIRKRB-20) Encrypt user keys with
 server master key
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit


     [ https://issues.apache.org/jira/browse/DIRKRB-20?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Xu Yaning updated DIRKRB-20:
----------------------------
    Comment: was deleted

(was: It seems that master is not the krbtgt/Domain@Domain key.)

> Encrypt user keys with server master key
> ----------------------------------------
>
>                 Key: DIRKRB-20
>                 URL: https://issues.apache.org/jira/browse/DIRKRB-20
>             Project: Directory Kerberos
>          Issue Type: New Feature
>            Reporter: Enrique Rodriguez
>            Assignee: Enrique Rodriguez
>
> User keys are currently stored in the DIT as plaintext keys, for example, in the krb5key.  These keys should be encrypted with the server master key.  The server master key should be stored in the Eve system partition.


--
This message was sent by Atlassian JIRA
(v6.3.4#6332)