Win 2008R2 kdc and linux client: no support for encryption type while getting initial credentials - SOLVED

Michael B Allen ioplex at gmail.com
Tue Mar 23 12:01:37 EDT 2010


On Tue, Mar 23, 2010 at 7:30 AM, John Jasen <jjasen at realityfailure.org> wrote:
> Michael B Allen wrote:
>
>> Actually I would not be surprised if that "hot fix" is never made
>> public. DES is being phased out. If you have any Windows accounts that
>> use DES, you should update them to AES-256, AES-128 or RC4 in that
>> order of preference.
>
> I'd have to check again, but I think linux-nfs still uses DES.

Well as an NFS on Linux user (albeit without Kerberos) I hope whomever
is responsible for that code has a plan to parameterize the enctype.

Mike

-- 
Michael B Allen
Java Active Directory Integration
http://www.ioplex.com/



More information about the Kerberos mailing list