ktadd/addprinc -e "WHAT-GOES-HERE"???

Ken Hornstein kenh at cmf.nrl.navy.mil
Wed Feb 1 12:02:35 EST 2006


>ktadd -e "des3-hmac-sha1" host/<BLAH>
>ktadd: Invalid argument while parsing keysalts des-hmac-sha1

You need to add a key SALT as well.  Unless you are absolutely sure you
know what you're doing, you should use "normal", seperated from the enctype
by a colon.  E.g:

	des3-hmac-sha1:normal

Should work.  Same goes for:

	aes256-cts:normal

(the longer one will work, but I just hate all that typing).

--Ken



More information about the Kerberos mailing list