[22137] in Kerberos
Re: arcfour not really there?
daemon@ATHENA.MIT.EDU (David Botsch)
Fri Aug 6 07:03:08 2004
Date: Thu, 5 Aug 2004 22:10:49 -0400
From: David Botsch <dwb7@ccmr.cornell.edu>
To: "Henry B. Hotz" <hotz@jpl.nasa.gov>
Message-ID: <20040806021049.GA14012@ccmr.cornell.edu>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <413BFCC1-E72F-11D8-BD9A-000A95CA746C@jpl.nasa.gov>
cc: kerberos@mit.edu
Errors-To: kerberos-bounces@mit.edu
FInally got it. Seems there was still a conflict between Redhat's RPMs of
Kerbeos (uh, version 1.2.4 which we had to leave installed to avoid breaking
lots of other pkgs) and the downloaded kerberos 1.3.
So far, I've only manually done a cpw -e rc4-hmac to a user. Have yet to try
other things (will be interesting to see what happens when I add this to the
list of supported_enctypes and see if kadmind and the kdc start and then to see
if the perl kerberos modules are happy or not).
On Thu, Aug 05, 2004 at 03:31:55PM -0700, Henry B. Hotz wrote:
> Heimdal arcfour == MIT rc4. Also there's the chaining method missing.
>
> I'm guessing it ought to be something like "cpw -e rc4-cbc-hmac".
>
> On Aug 4, 2004, at 9:03 AM, kerberos-request@mit.edu wrote:
>
> >Date: Tue, 3 Aug 2004 17:11:10 -0400
> >From: David Botsch <dwb7@ccmr.cornell.edu>
> >To: kerberos@mit.edu
> >Subject: arcfour not really there?
> >Message-ID: <20040803211110.GE27629@domino.ccmr.cornell.edu>
> >Content-Type: text/plain; format=flowed; charset=ISO-8859-1
> >MIME-Version: 1.0
> >Precedence: list
> >Message: 1
> >
> >Using 1.3.3, can't seem to get arcfour to work (have written about this
> >in the past):
> >
> >kadmin: cpw -e arcfour-hmac:normal bozo
> >change_password: Invalid argument while parsing keysalts arcfour-hmac
> >
> >This happens for all of the arcfour encryption types / salt combos.
> >
> >Thoughts?
> >
> >Thnx.
> >
> >--
> >********************************
> >David William Botsch
> >Consultant/Advisor II
> >CCMR Computing Facility
> >dwb7@ccmr.cornell.edu
> >********************************
> ------------------------------------------------------------------------
> ----
> The opinions expressed in this message are mine,
> not those of Caltech, JPL, NASA, or the US Government.
> Henry.B.Hotz@jpl.nasa.gov, or hbhotz@oxy.edu
--
********************************
David William Botsch
Consultant/Advisor II
CCMR Computing Facility
dwb7@ccmr.cornell.edu
********************************
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
