[28247] in Kerberos
Re: Using keytab on Windows with KfW
daemon@ATHENA.MIT.EDU (Christopher D. Clausen)
Sun Aug 12 15:00:16 2007
From: "Christopher D. Clausen" <cclausen@acm.org>
Date: Sun, 12 Aug 2007 13:45:54 -0500
Message-ID: <f9nkq0$bni$1@news.ks.uiuc.edu>
X-Complaints-To: news+abuse@ks.uiuc.edu
To: kerberos@mit.edu
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
Markus Moeller <huaraz@moeller.plus.com> wrote:
> Thanks for the pointer. I thought I fixed the enctypes in krb5.ini
> too, but copied it under the domain_realm section instead of
> libdefaults. (The default krb5.ini didn't have the same order as my
> krb5.conf )
I'd strongly suggest NOT specifying enc_types anywhere. The newer krb5
libs are smart enough to use the "best" encryption supported by
themselves and the KDC and the application server. Manually specifying
them just causes things to break, as you just saw.
<<CDC
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
