KDC: upgrade to 3DES

Jeffrey Altman jaltman at columbia.edu
Tue Apr 5 16:59:32 EDT 2005

shivakeshav santi wrote:

> HI,
>    I am trying to upgrade  the encryption type on the KDC to support 3DES. I have made the relevant changes in krb5.conf and kdc.conf(supported_enctypes, kdc_supported_enctypes,default_tgs_enctypes,default_tkt_enctypes :des3-hmac-sha1 des-cbc-crc)
> But when I use kinit , I only get the tickets with single des.
>  Etype (skey, tkt): DES cbc mode with CRC-32, DES cbc mode with CRC-32
> Am I missing something. 
> Thank you for your help.

Just a few questions for you to answer:

did you rekey your principal (aka change your password?)

is your client restricting the requested enctypes in the krb5.conf file?

does the client you are using support 3DES?

Jeffrey Altman

More information about the krbdev mailing list