key extraction for AFS kaserver

Ken Hornstein kenh at cmf.nrl.navy.mil
Thu Apr 15 14:48:11 EDT 2004


>I'm trying to extract a K5 key for afs.  The encryption type seems to be
>invalid.
>
>kadmin:  ktadd -e des-cbc-crc afs at WEB.RPI.EDU
>ktadd: Invalid argument while parsing keysalts des-cbc-crc

You really need a salt there, e.g.:

ktadd -e des-cbc-crc:normal afs at WEB.RPI.EDU

The salt type doesn't matter in this case, since there's no password
involved.

--Ken


More information about the Kerberos mailing list