[31195] in Kerberos
Re: cross-realm authentication problem
daemon@ATHENA.MIT.EDU (Guillaume Rousse)
Thu May 28 11:59:05 2009
Message-ID: <4A1EB4B2.8060706@inria.fr>
Date: Thu, 28 May 2009 17:58:42 +0200
From: Guillaume Rousse <Guillaume.Rousse@inria.fr>
MIME-Version: 1.0
CC: kerberos@mit.edu
In-Reply-To: <4A1EB16D.1010609@anl.gov>
Content-Type: text/plain; charset="iso-8859-1"
Errors-To: kerberos-bounces@mit.edu
Content-Transfer-Encoding: 8bit
Douglas E. Engert a écrit :
> krb5-1.6.1 supports RC4 and DES (plus others).
> Windows 2003 only supports RC4 and DES.
> krb5-1.3.1 only supports DES.
Windows 2003 support RC4 starting from SP2 only, and still uses DES for
cross-realm relationship by default. You have to install the Windows
2003 Resource kit*service pack2* to change this setting, using ktpass
command:
ktpass /MITRealmName DOMAINE.UNIX /TrustEncryp RC4
--
BOFH excuse #85:
Windows 95 undocumented "feature"
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
