Win 2008R2 kdc and linux client: no support for encryption type while getting initial credentials - SOLVED

Jeffrey Altman jaltman at secure-endpoints.com
Wed Mar 24 14:19:00 EDT 2010


On 3/22/2010 5:52 PM, Michael B Allen wrote:
> On Mon, Mar 22, 2010 at 12:01 PM, Lars Schimmer
> <l.schimmer at cgv.tugraz.at> wrote:
>> Hi!
>>
>> Just want to note here, that problem was solved with a (not yet public)
>> patch from Microsoft.
>> http://support.microsoft.com/?kbid=978055
>>
>> Go and ask your Microsoft Support for it.
>>
>> Looks like it only happens on x64 servers.
>
> Hi Lars,
>
> Actually I would not be surprised if that "hot fix" is never made
> public. DES is being phased out. If you have any Windows accounts that
> use DES, you should update them to AES-256, AES-128 or RC4 in that
> order of preference.
>
> Mike
>

I have confirmation from Microsoft that this "hot fix" will be
published.   The failure to publish
this "hot fix" was an oversight.

Jeffrey Altman




More information about the Kerberos mailing list