[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: kinit.c patch

On Sun, Mar 04, 2001 at 07:12:04AM +0100, Assar Westerlund wrote:
> > > Could you figure out what version of MIT krb5 KDC you had this problem
> > > with?
> > It's a stock 1.2.1 KDC.
> You should be able to add add:
> [libdefaults]
>         permitted_enctypes=des3-cbc-sha1 des-cbc-md5 des-cbc-md4 des-cbc-crc
> To your KDC instead.  This should be a better solution.
Hrmmm, I'm not sure that's the solution.  The problem I was having
specifically is that I needed des-cbc-crc for the -4 option to work to
kinit.  I assumed this was because (AFAIK) des-cbc-crc is the only crypto
Kerberos IV accepts, correct?  In any case, the default_etypes thing works
nicely.

-- 

..ooOO chris@chiappa.net              | My opinions are my own  OOoo..
..ooOO Chris.Chiappa@oracle.com       | and certainly not those OOoo..
..ooOO http://www.chiappa.net/~chris/ | of my employer          OOoo..