[25091] in Kerberos
Kerberos 1.4 w/o des
daemon@ATHENA.MIT.EDU (Trev Peterson)
Fri Dec 9 21:58:49 2005
From: Trev Peterson <trev@advanced-reality.com>
To: kerberos@mit.edu
Content-Type: text/plain
Date: Fri, 09 Dec 2005 20:46:35 -0600
Message-Id: <1134182795.24538.25.camel@ins8000.advanced-reality.com>
Mime-Version: 1.0
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
Hello,
I am trying to configure kerberos to use 3des and aes but not single
des. However, when I create a new principal I see the following in the
output of getprinc:
Number of keys: 2
Key: vno 1, Triple DES cbc mode with HMAC/sha1, no salt
Key: vno 1, DES cbc mode with CRC-32, no salt
Attributes:
The relevant portion of kdc.conf is:
master_key_type = des3-hmac-sha1
supported_enctypes = aes256-cts-hmac-sha1-96:normal
des3-hmac-sha1:normal
The kdc.conf is being used as it has the correct realm and all. The man
page on krb5kdc doesn't indicate any way to make the output more verbose
or include any debug info. Any suggestions on how to track this down
are appreciated.
--
Trev Peterson <trev@advanced-reality.com>
Advanced Reality
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
