MIT KDC + W2K clients (please help!)

[Lubos Kejzlar]

On 19 Jul 2002, Tom Yu wrote:

TY> kejzlar> kdc.conf: kejzlar> supported_enctypes = des:normal
TY> des:onlyrealm des:norealm des-cbc-crc:v4 des-cbc-crc:afs3
TY>
TY> Are all of these keysalts necessary for your installation?

Not actually (but probably we still need :v4 for compatibility issues). I
tried different setups, the last one is copy of our production server
config files -- not touched from our V4->V5 migration ...

TY> If you set the kdc.conf's supported_enctypes to be
TY> "des-cbc-crc:normal" and then change the password for an affected
TY> principal, does it start to work?

Not (even if does, I'm unable to force all our users to change their
passwords just after migration :-().

Best regards,
	Lubos

--------------------------------------------------------------------------
Lubos Kejzlar
System and Network Specialist

Laboratory for Computer Science                Tel.:      ++420-19-7491536
University of West Bohemia                                ++420-19-7421414
Univerzitni 8, 30614 Pilsen                    Fax:       ++420-19-7421419
Czech Republic                                 E-mail:  kejzlar at civ.zcu.cz

PGP Key fingerprint  =  5621 06DA 3EDE 5D15 F287  5408 9B8E C766 CD64 3A3F
--------------------------------------------------------------------------
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 1677 bytes
Desc: S/MIME Cryptographic Signature
Url : http://mailman.mit.edu/pipermail/kerberos/attachments/20020722/f41b1924/attachment.bin