KDC: upgrade to 3DES

[Jeffrey Altman]

shivakeshav santi wrote:

> HI,
>  
>    I am trying to upgrade  the encryption type on the KDC to support 3DES. I have made the relevant changes in krb5.conf and kdc.conf(supported_enctypes, kdc_supported_enctypes,default_tgs_enctypes,default_tkt_enctypes :des3-hmac-sha1 des-cbc-crc)
>  
> But when I use kinit , I only get the tickets with single des.
>  Etype (skey, tkt): DES cbc mode with CRC-32, DES cbc mode with CRC-32
>  
> Am I missing something. 
>  
> Thank you for your help.

Just a few questions for you to answer:

did you rekey your principal (aka change your password?)

is your client restricting the requested enctypes in the krb5.conf file?

does the client you are using support 3DES?

Jeffrey Altman