diff --git a/kdc.conf b/kdc.conf
index ceac49a..33383cb 100644
--- a/kdc.conf
+++ b/kdc.conf
@@ -9,5 +9,5 @@
   acl_file = /var/kerberos/krb5kdc/kadm5.acl
   dict_file = /usr/share/dict/words
   admin_keytab = /var/kerberos/krb5kdc/kadm5.keytab
-  supported_enctypes = aes256-cts:normal aes128-cts:normal des3-hmac-sha1:normal arcfour-hmac:normal des-hmac-sha1:normal des-cbc-md5:normal des-cbc-crc:normal des-cbc-crc:v4 des-cbc-crc:afs3
+  supported_enctypes = aes256-cts:normal aes128-cts:normal des3-hmac-sha1:normal arcfour-hmac:normal des-hmac-sha1:normal des-cbc-md5:normal des-cbc-crc:normal
  }
diff --git a/krb5.spec b/krb5.spec
index f2b2193..22ac8d1 100644
--- a/krb5.spec
+++ b/krb5.spec
@@ -626,6 +626,7 @@ exit 0
 %changelog
 * Tue Mar 23 2010 Nalin Dahyabhai <nalin@redhat.com> - 1.8-5
 - add upstream fix for denial-of-service in SPNEGO (CVE-2010-0628)
+- kdc.conf: no more need to suggest keeping keys with v4-compatible salting
 
 * Fri Mar 19 2010 Nalin Dahyabhai <nalin@redhat.com> - 1.8-4
 - remove the krb5-appl bits (the -workstation-clients and -workstation-servers