[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: forcing session key type
Dave Love <email@example.com> writes:
> So I assume I need to force a des-cbc-crc session key. Is there a way
> to do that? I can't find a suitable config option in the doc.
This is with a MIT KDC? I think you need
default_etypes = des3-cbc-sha1 des-cbc-crc
or something like that. des-cbc-md5 *might* work, but last time i
looked, MIT did funny things with des-cbc-md4 and -md5.
> [Is there a way to get more helpful error messages than the above?]
I think it's because the KDC doesn't send a useful string in e_text.