UNIX GSS-API / Windows SSPI :

Jeffrey Altman jaltman2 at nyc.rr.com
Fri Sep 17 16:35:51 EDT 2004


Jacques Lebastard wrote:

> How can I check this and, second question, how can I generate a keytab 
> with RC4-HMAC encryption ? The ktpass tool does not accept the RC4-HMAC 
> crypto type:
> 
> [- /]       crypto : Cryptosystem to use
> [- /]       crypto :  is one of:
> [- /]       crypto : DES-CBC-CRC : for compatibility
> [- /]       crypto : DES-CBC-MD5 : default
> 
> Trying '-crypto RC4-HMAC' indicates that the SPN is marked for DES only 
> ! How can I modify this ?
> 
> Thanks for your help,

You need to use the KTPASS.EXE from the SUPPORT folder of Windows 2003 
SP1 pre-release in order to generate a keytab with RC4-HMAC.



-- 
-----------------
This e-mail account is not read on a regular basis.
Please send private responses to jaltman at mit dot edu


More information about the Kerberos mailing list