[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: kinit.c patch

Chris Chiappa <griffon+heimdal-discuss@snurgle.org> writes:
> Ahh, I looked in the sample krb5.conf but didn't think to check the man page.

That file is a little bit aged, we should update it.

> > Could you figure out what version of MIT krb5 KDC you had this problem
> > with?
> It's a stock 1.2.1 KDC.

You should be able to add add:

        permitted_enctypes=des3-cbc-sha1 des-cbc-md5 des-cbc-md4 des-cbc-crc

To your KDC instead.  This should be a better solution.