Ticket enctype question

[Ben Poliakoff]

* Ken Hornstein <kenh at cmf.nrl.navy.mil> [20060831 11:30]:
> >In other words, when I tried reversing the order of 'supported_enctypes'
> >like this:
> >
> >    supported_enctypes = aes256-cts:normal des3-cbc-sha1:normal \
> >        des-cbc-crc:normal
> 
> Hrm.  I've definately made it work without des-cbc-crc in the front.

It's good to hear that you've had it work.  I'll have to experiment some
more.

> >I found that native windows clients could no longer authenticate to the
> >KDC.  Perhaps Vista will support enctypes other than single DES...
> 
> Didn't try arcfour, did you?

No, I definitely didn't.

Ben

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://mailman.mit.edu/pipermail/kerberos/attachments/20060831/7f67369d/attachment.bin