Correct procedure to add a new enctype

[Dario García Díaz-Miguel]

Hi Everyone,

I've a question I prefer to ask before starting to test with the environment to proceed in a correct way.
We have a Kerberos LDAP database backend  and I was wondering which is the correct procedure to add a new enctype to an existing and populated database and REALM.
Currently we have two supported and default enctypes for tkt and tgs. However, now we have an application that does not support our current supported enctypes so we have to add a new enctype.

Which is the correct procedure to add this enctype and to generate an additional key for this enctype for each principal involved?

I suppose that the enctype used will be the strongest one of the supported enctype keys existing for that principal.

Thank you so much.
Regards.





[cid:image001.gif at 01D7F266.1D932ED0]

Dario Garcia
Díaz-Miguel
GGCS-SES Unit
GGCS SKMF Infrastructure Division

GMV
C\ de Isaac Newton, 11
28760, Tres Cantos, Madrid
España
+34 918 07 21 00
+34 918 07 21 99
www.gmv.com <http://www.gmv.com/>
[cid:image002.png at 01D7F266.1D932ED0]<http://www.facebook.com/infoGMV>

[cid:image003.png at 01D7F266.1D932ED0]<http://www.twitter.com/infoGMV_es>

[cid:image004.png at 01D7F266.1D932ED0]<http://www.youtube.com/infoGMV>

[cid:image005.png at 01D7F266.1D932ED0]<https://www.linkedin.com/company/gmv>

[cid:image006.png at 01D7F266.1D932ED0]<http://www.gmv.com/en/RSS>


[cid:image007.png at 01D7F266.1D932ED0]<http://www.gmv.com/blog_gmv/language/en/>





P Please consider the environment before printing this e-mail.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.gif
Type: image/gif
Size: 5711 bytes
Desc: image001.gif
URL: <http://mailman.mit.edu/pipermail/kerberos/attachments/20211216/7d62f67d/attachment-0001.gif>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image002.png
Type: image/png
Size: 2914 bytes
Desc: image002.png
URL: <http://mailman.mit.edu/pipermail/kerberos/attachments/20211216/7d62f67d/attachment-0006.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image003.png
Type: image/png
Size: 2946 bytes
Desc: image003.png
URL: <http://mailman.mit.edu/pipermail/kerberos/attachments/20211216/7d62f67d/attachment-0007.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image004.png
Type: image/png
Size: 3026 bytes
Desc: image004.png
URL: <http://mailman.mit.edu/pipermail/kerberos/attachments/20211216/7d62f67d/attachment-0008.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image005.png
Type: image/png
Size: 2913 bytes
Desc: image005.png
URL: <http://mailman.mit.edu/pipermail/kerberos/attachments/20211216/7d62f67d/attachment-0009.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image006.png
Type: image/png
Size: 3042 bytes
Desc: image006.png
URL: <http://mailman.mit.edu/pipermail/kerberos/attachments/20211216/7d62f67d/attachment-0010.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image007.png
Type: image/png
Size: 4932 bytes
Desc: image007.png
URL: <http://mailman.mit.edu/pipermail/kerberos/attachments/20211216/7d62f67d/attachment-0011.png>