Just an update on turning off DES

Simo Sorce ssorce at redhat.com
Tue Jan 26 14:03:59 EST 2010


On Tue, 26 Jan 2010 13:30:56 -0500
Sam Hartman <hartmans at debian.org> wrote:

> 
> 
> So far we've broken:
> 
> * OpenAFS
> * Linux NFS

I have been working hard within Red Hat to get Linux NFS fixed so it
can use more than DES.
As far as I know this should go upstream soon, crossing fingers.

> * Samba --still getting details on that

Samba shouldn't have problems if DES is not supported, the most used is
rc4-hmac, do you have more details ?

> * A number of academic sites.
> 
> I'm not sure we're doing anything wrong--someone's got to put pressure
> on software vendors to move on from DES--but people are sure going to
> feel this change.

Time to feel it if you ask me, some people change only when they have
to.

Simo.


-- 
Simo Sorce * Red Hat, Inc * New York



More information about the krbdev mailing list