[29379] in Kerberos

home help back first fref pref prev next nref lref last post

Utilities to determine supported encryption types

daemon@ATHENA.MIT.EDU (RJT)
Thu Feb 28 07:30:45 2008

From: RJT <rob.townley@gmail.com>
Date: Thu, 28 Feb 2008 04:15:08 -0800 (PST)
Message-ID: <9a08587b-c132-431c-803e-b4f85bf9b09c@e60g2000hsh.googlegroups.com>
Mime-Version: 1.0
X-Complaints-To: groups-abuse@google.com
Complaints-To: groups-abuse@google.com
To: kerberos@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu

Trying to logon to Win200x AD from Linux machines.  There must be a
cross platform utility to list the encryption types available under
Linux and under Windows.  Further, what encryption types are available
for a particular username because in Win2003, you can enable des
authentication on a per user basis.

For example, the utility may return a list similar to the following.

rsa-md4-des
arcfour-hmac-md5
des-cbc-md5
des3-cbc-sha1-kd
aes128-cts-hmac-sha1-96

A partial list of key types is available here
http://www.gnu.org/software/shishi/manual/html_node/Cryptographic-Overview.html

________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

home help back first fref pref prev next nref lref last post