when is an acceptor subkey created?

[Weijun Wang]

Yes, I was using des-cbc-md5. It seems aes etypes always generate a 
subkey for acceptor.

Thanks
Weijun

On 02/06/2013 02:30 PM, Greg Hudson wrote:
> On 02/05/2013 09:55 PM, Weijun Wang wrote:
>> It seems the acceptor only creates a subkey when RFC 4537 is requested.
>> Is that true? I'm looking for an acceptor side configuration that forces
>> a subkey always being created.
>
> I believe the MIT krb5 GSS acceptor generates a subkey whenever CFX or
> DCE is used, as of 1.7.
>