In all_etypes prefer des3-cbc-sha1 over arcfour-hmac-md5
update (c)
release pool when done
now that use used up more then 16 flags and we have been using the right bit order for many years, lets stop dealing with broken bit fields from ticket flags
use LT_INIT only, fixes #95
hush autoconf
version-script-client.map needs to be in dist

version-script-client.map needs to be in lib/kadm5's EXTRA_DIST,
otherwise make distcheck fails
Use correct value for anonymous flags

The KDC Option and Ticket Flag for the anonymous extension were changed
from 14 to 16 due to a conflict with S4U2Proxy in version 11 of the anonymous
draft (now RFC6112). Fix the definitions
Recognize anonymous AS requests using bit 14

Check KDC Option bit 14 in addition to 16 when identifying anonymous
AS-REQs. This provides compatibility with older heimdal releases.
Include empty PKINIT-KX padata

rfc6112 requires kdcs implementing anonymous PKINIT to include an
empty PKINIT-KX padata in PREAUTH_REQUIRED messages.
Including this improves compatibility with MIT kerberos.
When using PKINIT with DH, compute session key

RFC6112 provides a method of computing a session key when the PKINIT DH
is used, and mandates it for anonymous pkinit. The session key is computed
using KRB-FX-CF2 from the reply key and a random key chosen by the kdc.
The random key is provided to the client, which is supposed to verify
that the session key was computed this way.
Document logic in _krb5_is_anon_request

describe why we look at the different bits and fields
Use anon realm for anonymous PKINIT

When an AS request names the anonymous principal, use the anonymous
realm in the response and ticket.
Install compatibility symlinks for kadmin and ktutil.
Remove references to KRBTKFILE from login.1 and kinit.1.
afslog.1: Remove documentation for removed no-v4 argument.
Remove kerberos 4 references from kimpersonate.8.
kadmin: handle systemd setpgid failure

When running as a service under systemd, kadmin cannot successfully use
setpgid().  The call fails with EPERM. Do not treat this as a fatal
error; instead, allow kadmind to continue starting up.
klist: fix spelling in comments
check for sys/errno.h