[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Compatibilty between MIT and Heimdal



Alex Schenkman <alex@melody.se> writes:
> Are there any encryption defaults that I should change to have a standard
> RedHat krb5-workstation MIT package interact with a default compialtion of
> heimdal (as kdc) ??
> 
> This below is from my heimdal kdc to the client RedHat (MIT)
> 
> 
> [me@roberto /tmp]$ telnet marley.intern
> Trying 10.1.1.81...
> Connected to marley.intern.
> Escape character is '^]'.
> [ Trying mutual KERBEROS5 (host/marley.intern@FREE.TEST)... ]
> [ Kerberos V5 refuses authentication because telnetd: krb5_rd_req failed: Bad encryption type ]
> [ Trying KERBEROS5 (host/marley.intern@FREE.TEST)... ]
> [ Kerberos V5 refuses authentication because telnetd: krb5_rd_req failed: Bad encryption type ]

I'm not sure if this has already been answered, but otherwise, add to
your /etc/krb5.conf:

[libdefaults]
        default_etypes = des-cbc-crc
        default_etypes_des = des-cbc-crc

/assar