Re: forcing session key type

[joda@pdc.kth.se (Johan Danielsson)]

Dave Love <d.love@dl.ac.uk> writes:

> So I assume I need to force a des-cbc-crc session key.  Is there a way
> to do that?  I can't find a suitable config option in the doc.

This is with a MIT KDC? I think you need

[libdefaults]
        default_etypes = des3-cbc-sha1 des-cbc-crc

or something like that. des-cbc-md5 *might* work, but last time i
looked, MIT did funny things with des-cbc-md4 and -md5.

> [Is there a way to get more helpful error messages than the above?]

I think it's because the KDC doesn't send a useful string in e_text.

/Johan