Kprop failing when changing permitted tgs and tgt types

Greg Hudson ghudson at MIT.EDU
Sun Feb 3 12:48:13 EST 2013


On 02/03/2013 12:36 PM, Joe Travaglini wrote:
> OK Greg. Thank you for the reply. Is there any way to configure this
> specifically for kdb5 dump and kprop and not globally for all principals?

You could use a separate krb5.conf (and the KRB5_CONFIG environment
variable), but short of that, no.

Why are you removing AES from the enctype variables?  Perhaps there is a
better way around whatever problem you're fixing that way.



More information about the Kerberos mailing list