[23539] in Kerberos
Re: Kerberos and windows problem ...
daemon@ATHENA.MIT.EDU (Dennis Davis)
Wed Mar 16 12:47:13 2005
Date: Wed, 16 Mar 2005 17:46:01 +0000 (GMT)
From: Dennis Davis <D.H.Davis@bath.ac.uk>
To: daylebo <daylebo5@gmail.com>
In-Reply-To: <2d1b9184.0503160419.49aef9b9@posting.google.com>
Message-ID: <Pine.GSO.4.62.0503161732570.10151@hinault.bath.ac.uk>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
cc: kerberos@mit.edu
Reply-To: Dennis Davis <D.H.Davis@bath.ac.uk>
Errors-To: kerberos-bounces@mit.edu
On Wed, 16 Mar 2005, daylebo wrote:
> From: daylebo <daylebo5@gmail.com>
> To: kerberos@mit.edu
> Date: 16 Mar 2005 04:19:09 -0800
> Subject: Re: Kerberos and windows problem ...
>
> > Windows does not support 3DES. You must only generate RC4 or
> > single DES keys for the host principal. In general, if you have
> > support for RC4 then do not generate DES at all.
>
> pls can u give me a few more details how to do teh above... i
> checked in the kadmin util .. but me can't find any option for
> RC4...
It's the -e option to the addprinc, ktadd etc commands in kadmin.
Specify one or more of the encryption types specified in the System
Administrator's Guide. For example:
addprinc -e "rc4-hmac:normal des-cbc-md4:normal" ...
(Oh boy, I hope I've got that right. Never used it myself, always
relied on the defaults :-)
--
Dennis Davis, BUCS, University of Bath, Bath, BA2 7AY, UK
D.H.Davis@bath.ac.uk Phone: +44 1225 386101
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
