[28978] in Kerberos
Re: GSSAPI on Linux using Windows AD Servers as KDCs - Errors about
daemon@ATHENA.MIT.EDU (Kevin Coffman)
Mon Jan 7 11:38:29 2008
Message-ID: <4d569c330801070838p26693373jd648f7d4f7e1ab93@mail.gmail.com>
Date: Mon, 7 Jan 2008 11:38:00 -0500
From: "Kevin Coffman" <kwc@citi.umich.edu>
To: "Douglas E. Engert" <deengert@anl.gov>
In-Reply-To: <4782503F.1080100@anl.gov>
MIME-Version: 1.0
Content-Disposition: inline
Cc: "Richard E. Silverman" <res@qoxp.net>, kerberos@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
On Jan 7, 2008 11:15 AM, Douglas E. Engert <deengert@anl.gov> wrote:
>
>
> Jason D. McCormick wrote:
> > Douglas E. Engert wrote:
> >
> >> Why are you using DES? All the newer Kerberos can use ArcFour. So try
> >> ktpass witout the crypto option.
> >
> > Do you know if the Linux NFSv4 stuff can use ArcFour? I've only been
> > able to find (older - circa '06) docs that state the only working type
> > is des-cbc-crc.
>
> Don't know, but a lot of the developers on the nfsv4@ietf.org list are also
> on the Kerberos list.
The user-land code, which uses Kerberos GSS, can handle all the
enctypes that Kerberos supports. However, the kernel GSS code is
still limited to only DES. I'm currently working on fixing that.
K.C.
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
