Antwort: Re: Encryption types [Virus checked]

[Sam Hartman]

>>>>> "Wyllys" == Wyllys Ingersoll <wyllys.ingersoll at sun.com> writes:

    Wyllys> Sam Hartman wrote:
    >>>>>>> "denis" == denis havlik <denis.havlik at t-mobile.at> writes:
    >> >> Make sure that the service principals in the KDC do not
    >> contain >> any enctypes other than DES-CBC-CRC or DES-CBC-MD5.
    >> Java >> cannot handle them.

    Wyllys> Unfortunately, the Kerberos implementation in Java only
    Wyllys> supports single DES enctypes, so that is why they are
    Wyllys> recommending setting those flags in AD, so that the Java
    Wyllys> client will get tickets with an enctype that they can use.

But we're talking about a Java client and a C server (SQL Server)
here.

The client can tell the KDC what enctypes it supports and shouldn't
require mucking around with account settings.

--Sam

    Wyllys> -Wyllys