Win 2008R2 kdc and linux client: no support for encryption typewhile getting initial credentials - SOLVED

Christopher D. Clausen cclausen at acm.org
Tue Mar 23 11:32:05 EDT 2010


John Jasen <jjasen at realityfailure.org> wrote:
> Michael B Allen wrote:
>
>> Actually I would not be surprised if that "hot fix" is never made
>> public. DES is being phased out. If you have any Windows accounts that
>> use DES, you should update them to AES-256, AES-128 or RC4 in that
>> order of preference.
>
> I'd have to check again, but I think linux-nfs still uses DES.

OpenAFS also requires single DES, which is what what the original poster is 
using based on a similar message sent to the openafs mailing list.

<<CDC




More information about the Kerberos mailing list