KDC: upgrade to 3DES
jaltman at columbia.edu
Tue Apr 5 16:59:32 EDT 2005
shivakeshav santi wrote:
> I am trying to upgrade the encryption type on the KDC to support 3DES. I have made the relevant changes in krb5.conf and kdc.conf(supported_enctypes, kdc_supported_enctypes,default_tgs_enctypes,default_tkt_enctypes :des3-hmac-sha1 des-cbc-crc)
> But when I use kinit , I only get the tickets with single des.
> Etype (skey, tkt): DES cbc mode with CRC-32, DES cbc mode with CRC-32
> Am I missing something.
> Thank you for your help.
Just a few questions for you to answer:
did you rekey your principal (aka change your password?)
is your client restricting the requested enctypes in the krb5.conf file?
does the client you are using support 3DES?
More information about the krbdev