MIT KDC + W2K clients (please help!)

Sam Hartman hartmans at MIT.EDU
Sat Jul 20 07:44:55 EDT 2002


>>>>> "Tom" == Tom Yu <tlyu at MIT.EDU> writes:

>>>>> "kejzlar" == Lubos Kejzlar <kejzlar at civ.zcu.cz> writes:
    kejzlar> kdc.conf: supported_enctypes = des:normal des:onlyrealm
    kejzlar> des:norealm des-cbc-crc:v4 des-cbc-crc:afs3

    Tom> Are all of these keysalts necessary for your installation?
    Tom> If you set the kdc.conf's supported_enctypes to be
    Tom> "des-cbc-crc:normal" and then change the password for an
    Tom> affected principal, does it start to work?


I'd be surprised if that worked based on the packet traces, but really
if it does, we need to see what's broken and go fix it.




More information about the Kerberos mailing list