[22495] in Kerberos

home help back first fref pref prev next nref lref last post

Re: UNIX GSS-API / Windows SSPI :

daemon@ATHENA.MIT.EDU (Jeffrey Altman)
Fri Sep 17 16:46:52 2004

Message-ID: <414B4B17.3000906@nyc.rr.com>
From: Jeffrey Altman <jaltman2@nyc.rr.com>
Date: Fri, 17 Sep 2004 20:35:51 GMT
To: kerberos@mit.edu
Errors-To: kerberos-bounces@mit.edu

Jacques Lebastard wrote:

> How can I check this and, second question, how can I generate a keytab 
> with RC4-HMAC encryption ? The ktpass tool does not accept the RC4-HMAC 
> crypto type:
> 
> [- /]       crypto : Cryptosystem to use
> [- /]       crypto :  is one of:
> [- /]       crypto : DES-CBC-CRC : for compatibility
> [- /]       crypto : DES-CBC-MD5 : default
> 
> Trying '-crypto RC4-HMAC' indicates that the SPN is marked for DES only 
> ! How can I modify this ?
> 
> Thanks for your help,

You need to use the KTPASS.EXE from the SUPPORT folder of Windows 2003 
SP1 pre-release in order to generate a keytab with RC4-HMAC.



-- 
-----------------
This e-mail account is not read on a regular basis.
Please send private responses to jaltman at mit dot edu
________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

home help back first fref pref prev next nref lref last post