[23664] in Kerberos
Re: netapp, nfs, kerberos, and ldap
daemon@ATHENA.MIT.EDU (Jeffrey Altman)
Thu Apr 7 16:50:21 2005
Message-ID: <42559D11.1060609@nyc.rr.com>
From: Jeffrey Altman <jaltman2@nyc.rr.com>
Date: Thu, 07 Apr 2005 20:40:08 GMT
To: kerberos@mit.edu
Errors-To: kerberos-bounces@mit.edu
user wrote:
> I found out when the keytabs were created DES only
> for the services. Also in the krb5.conf, we have
>
> [libdefaults]
> ticket_lifetime = 600
> default_realm = EXAMPLE.COM
> default_tkt_enctypes = des-cbc-crc
> default_tgs_enctypes = des-cbc-crc
>
> it seemed to help
>
>
There is no reason to restrict your entire realm to using
weak DES based crypto simply because your filer does not support
anything but DES. Remove the two enctype lines from your krb5.conf
and simply restrict the enctypes on the service principal used
for the filer to des-cbc-crc
Jeffrey Altman
--
-----------------
This e-mail account is not read on a regular basis.
Please send private responses to jaltman at mit dot edu
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
