[29561] in Kerberos
Re: Secure NFS under Red Hat Enterprise Linux 4
daemon@ATHENA.MIT.EDU (Roberto =?iso-8859-1?Q?C=2E_S=E1nc)
Sat Mar 22 08:50:53 2008
Date: Sat, 22 Mar 2008 08:49:52 -0400
From: Roberto =?iso-8859-1?Q?C=2E_S=E1nchez?= <roberto@connexer.com>
To: kerberos@mit.edu
Message-ID: <20080322124952.GA17198@connexer.com>
Mail-Followup-To: kerberos@mit.edu
MIME-Version: 1.0
In-Reply-To: <Pine.GSO.4.55.0803211834450.7268@loogie.intranet.csupomona.edu>
Content-Type: multipart/mixed; boundary="===============0083614453=="
Errors-To: kerberos-bounces@mit.edu
--===============0083614453==
Content-Type: multipart/signed; micalg=pgp-sha1;
protocol="application/pgp-signature"; boundary="/9DWx/yDrRhgMJTb"
Content-Disposition: inline
--/9DWx/yDrRhgMJTb
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
On Fri, Mar 21, 2008 at 06:45:01PM -0800, Paul B. Henson wrote:
>=20
> Is there any way to get rpc.gssd to request DES session keys without
> crippling the entire system's encryption level?
>=20
I used this HOWTO:
http://www-theorie.physik.unizh.ch/~dpotter/howto/kerberos
The crux of it is something like this:
[root@phoenix ~]# kadmin
Authenticating as principal root/admin@PHYSIK.UNIZH.CH with password.
Password for root/admin@PHYSIK.UNIZH.CH:=20
kadmin: ktadd host/phoenix.physik.unizh.ch
kadmin: ktadd -e des-cbc-crc:normal nfs/phoenix.physik.unizh.ch
That worked well for me. It lets me have DES only for NFS and 3DES for
everything else.
Regards,
-Roberto
--=20
Roberto C. S=E1nchez
http://people.connexer.com/~roberto
http://www.connexer.com
--/9DWx/yDrRhgMJTb
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: Digital signature
Content-Disposition: inline
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
iD8DBQFH5QBw5SXWIKfIlGQRAsHfAKCwq0tsrIPN+CyRh6oVKzFU6EK1RwCgtgqn
JUz2a86tc5+XZB6AzNgxFyM=
=Y3Oe
-----END PGP SIGNATURE-----
--/9DWx/yDrRhgMJTb--
--===============0083614453==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
--===============0083614453==--
