[Fwd: Re: AD MIT Interoperability rc4-hmac]

[rousset]

KDC MIT 1.3.1(same pb with 1.3.2beta), and yes, the user principal in
the MIT KDC have a key of type RC4-HMAC. (It work without preauth attribute)

Denis Rousset

Jeffrey Altman a écrit:

 > Which version of MIT Kerberos is the KDC?
 >
 > And more importantly, does the user principal in the MIT KDC have a key
 > of type RC4-HMAC associated with it?
 >
 > Jeffrey Altman
 >
 >
 > rousset wrote:
 >
 >> Hello,
 >>
 >> I have established a trust relationship between Active Directory and
 >> MIT Kerberos realm, mapped principals, and can successfully logon to
 >> a Win2k workstation using a Kerberos principal. This is right with
 >> attribute "PRE-AUTH required" enabled and encryption des-cbc-crc, or
 >> md5.
 >> But I'd like to set rc4-hmac as default encryption on MIT principals.
 >> It fails with "Additionnal Pre-authentication required" log on MIT's
 >> side if pre-auth is enabled
 >> (Work if pre-auth disabled)
 >>
 >>
 >> Thanks
 >> Denis
 >>
 >>
 >>
 >>
 >> ________________________________________________
 >> Kerberos mailing list           Kerberos at mit.edu
 >> https://mailman.mit.edu/mailman/listinfo/kerberos
 >>
 >
 >