From 6c2b83ba262c18109612ad98deb4adf535eab724 Mon Sep 17 00:00:00 2001
From: Cullum Smith <cullum@sacredheartsc.com>
Date: Wed, 25 Sep 2024 21:41:52 -0400
Subject: cleanup

---
 files/etc/krb5.conf.common     | 2 --
 files/etc/krb5.conf.idm_server | 1 -
 2 files changed, 3 deletions(-)

diff --git a/files/etc/krb5.conf.common b/files/etc/krb5.conf.common
index aa2c11f..3274deb 100644
--- a/files/etc/krb5.conf.common
+++ b/files/etc/krb5.conf.common
@@ -5,8 +5,6 @@
   allow_weak_crypto = false
   permitted_enctypes = aes256-cts-hmac-sha1-96 aes128-cts-hmac-sha1-96
   default_client_keytab_name = /var/db/keytabs/%{euid}.keytab
-  # Breaks screenlockers
-  # verify_ap_req_nofail = true
 
 [appdefaults]
   pam = {
diff --git a/files/etc/krb5.conf.idm_server b/files/etc/krb5.conf.idm_server
index 422d0e4..3f326ad 100644
--- a/files/etc/krb5.conf.idm_server
+++ b/files/etc/krb5.conf.idm_server
@@ -4,7 +4,6 @@
   dns_lookup_realm = false
   allow_weak_crypto = false
   permitted_enctypes = aes256-cts-hmac-sha1-96 aes128-cts-hmac-sha1-96
-  verify_ap_req_nofail = true
 
 [appdefaults]
   pam = {
-- 
cgit v1.2.3