Session Key Types

Anil Belur abelur at novell.com
Thu Sep 23 05:07:07 EDT 2004


Hi,

I am using two different versions of MIT KDC's (1.2.7 and 1.3.3). I have created a similar service principals of type des-cbc-crc:normal in both the versions of the KDC's. When I get the service ticket from the KDC (1.2.7), I get a session key of type:

#/home/builds/krb5-1.3.1/src/appl # klist -e
Ticket cache: FILE:/tmp/krb5cc_0
Default principal: test1 at testRealm

Valid starting     Expires            Service principal
09/23/04 11:49:34  09/23/04 21:49:34  krbtgt/testRealm at testRealm
        renew until 09/23/04 11:49:34, Etype (skey, tkt): DES cbc mode with CRC-32, DES cbc mode with CRC-32
09/23/04 11:49:44  09/23/04 21:49:34  sample at testRealm
        Etype (skey, tkt): DES cbc mode with CRC-32, DES cbc mode with CRC-32

*-----------------------------------------------------
When I get a service ticket from KDC 1.3.3, I get a session key of type

#/home/builds/krb5-1.3.1/src/clients/klist # klist -e
Ticket cache: FILE:/tmp/krb5cc_0
Default principal: test1 at testRealm.com 

Valid starting     Expires            Service principal
09/22/04 18:16:24  09/23/04 18:16:24  krbtgt/testRealm.com at testRealm.com 
        Etype (skey, tkt): DES cbc mode with CRC-32, Triple DES cbc mode with HMAC/sha1
09/22/04 18:17:16  09/23/04 18:16:24  sample at testRealm.com 
        Etype (skey, tkt): DES cbc mode with RSA-MD4, DES cbc mode with CRC-32

Why am i receiving a different session key type?

Thanks in advance,
Anil




More information about the Kerberos mailing list