[32172] in Kerberos
Re: Win 2008R2 kdc and linux client: no support for encryption type
daemon@ATHENA.MIT.EDU (Michael B Allen)
Tue Mar 23 12:03:00 2010
MIME-Version: 1.0
In-Reply-To: <4BA8A669.6070802@realityfailure.org>
Date: Tue, 23 Mar 2010 12:01:37 -0400
Message-ID: <78c6bd861003230901v2eed4737n1bd1bcc7d1c74f86@mail.gmail.com>
From: Michael B Allen <ioplex@gmail.com>
To: John Jasen <jjasen@realityfailure.org>
Cc: kerberos@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
On Tue, Mar 23, 2010 at 7:30 AM, John Jasen <jjasen@realityfailure.org> wrote:
> Michael B Allen wrote:
>
>> Actually I would not be surprised if that "hot fix" is never made
>> public. DES is being phased out. If you have any Windows accounts that
>> use DES, you should update them to AES-256, AES-128 or RC4 in that
>> order of preference.
>
> I'd have to check again, but I think linux-nfs still uses DES.
Well as an NFS on Linux user (albeit without Kerberos) I hope whomever
is responsible for that code has a plan to parameterize the enctype.
Mike
--
Michael B Allen
Java Active Directory Integration
http://www.ioplex.com/
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
