Need info on Kerberos configuration with AES & SHA2

[Benjamin Kaduk]

On Fri, 2 Jan 2015, Prashanth Marampally wrote:

> Hi,
>
> I am naive to kerberos.
>
> Would like to know whether or not can we configure kerberos 5 with AES &
> SHA2. If yes, please guide me with some articles, documentations etc.

Currently, you cannot.

There is a draft proposal for how such a combination could be done
(https://tools.ietf.org/html/draft-ietf-kitten-aes-cts-hmac-sha2-05), but
it is just a draft and has not yet been finalized as an IETF RFC.  After
that happens, someone would have to actually implement the proposal in a
kerberos library.

-Ben Kaduk