MIT-Heimdal interop issues
Sam Hartman
hartmans at MIT.EDU
Sat Jul 24 11:22:10 EDT 2004
>>>>> "Kevin" == Kevin Coffman <kwc at citi.umich.edu> writes:
Kevin> Ignore me. I wasn't restarting my client between changes
Kevin> of krb5.conf. After restarting the client, it seems to be
Kevin> honoring the config file options and negotiating a
Kevin> des-cbc-crc service ticket.
It's really kind of unfortunate that your kernel module does not
support des-cbc-md4. Asking people to change their krb5.confs is
unacceptable from an administration stand point, because they won't
remember to remove the changes when their site starts supporting 3des
or aes.
Unfortunately your module seems to be the only thing that doesn't
support des-cbc-md4.
More information about the Kerberos
mailing list