[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: kinit.c patch
On Sun, Mar 04, 2001 at 07:12:04AM +0100, Assar Westerlund wrote:
> > > Could you figure out what version of MIT krb5 KDC you had this problem
> > > with?
> > It's a stock 1.2.1 KDC.
> You should be able to add add:
> permitted_enctypes=des3-cbc-sha1 des-cbc-md5 des-cbc-md4 des-cbc-crc
> To your KDC instead. This should be a better solution.
Hrmmm, I'm not sure that's the solution. The problem I was having
specifically is that I needed des-cbc-crc for the -4 option to work to
kinit. I assumed this was because (AFAIK) des-cbc-crc is the only crypto
Kerberos IV accepts, correct? In any case, the default_etypes thing works
..ooOO email@example.com | My opinions are my own OOoo..
..ooOO Chris.Chiappa@oracle.com | and certainly not those OOoo..
..ooOO http://www.chiappa.net/~chris/ | of my employer OOoo..