[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: forcing session key type

Dave Love <d.love@dl.ac.uk> writes:

> So I assume I need to force a des-cbc-crc session key.  Is there a way
> to do that?  I can't find a suitable config option in the doc.

This is with a MIT KDC? I think you need

        default_etypes = des3-cbc-sha1 des-cbc-crc

or something like that. des-cbc-md5 *might* work, but last time i
looked, MIT did funny things with des-cbc-md4 and -md5.

> [Is there a way to get more helpful error messages than the above?]

I think it's because the KDC doesn't send a useful string in e_text.