[24226] in Kerberos
Re: Updating encryption types
daemon@ATHENA.MIT.EDU (Phil Dibowitz)
Wed Jul 6 18:41:49 2005
Date: Wed, 6 Jul 2005 15:40:41 -0700
From: Phil Dibowitz <phil@usc.edu>
To: kerberos@mit.edu
Message-ID: <20050706224041.GT27759@usc.edu>
Mail-Followup-To: kerberos@mit.edu
Mime-Version: 1.0
In-Reply-To: <20050705204853.GE27759@usc.edu>
Content-Type: multipart/mixed; boundary="===============99936544750924527=="
Errors-To: kerberos-bounces@mit.edu
--===============99936544750924527==
Content-Type: multipart/signed; micalg=pgp-sha1;
protocol="application/pgp-signature"; boundary="YOs9+ySvlQ/qtugP"
Content-Disposition: inline
--YOs9+ySvlQ/qtugP
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
On Tue, Jul 05, 2005 at 01:48:54PM -0700, Phil Dibowitz wrote:
> from kadmin, great (though is that "no salt" supposed to be there?)!
>=20
> However, klist -e shows:
>=20
> [phil@frantic unstale]$ klist -e
> Ticket cache: FILE:/tmp/krb5cc_36070
> Default principal: phil@ISD.USC.EDU
>=20
> Valid starting Expires Service principal
> 07/05/05 13:36:31 07/05/05 23:36:31 krbtgt/ISD.USC.EDU@ISD.USC.EDU
> Etype (skey, tkt): DES cbc mode with CRC-32, DES cbc mode with CR=
C-32=20
> [phil@frantic unstale]$=20
>=20
> and the logs show:
>=20
> Jul 05 13:36:31 frantic.usc.edu krb5kdc[26284](info): AS_REQ (3 etypes {2=
3 16
> 1}) 128.125.10.120: ISSUE: authtime 1120595791, etypes {rep=3D23 tkt=3D1 =
ses=3D1},
> phil@ISD.USC.EDU for krbtgt/ISD.USC.EDU@ISD.USC.EDU
>=20
> Neither the session key, nor my principal key seem to have been using the=
new
> encryption... it's not clear to me why...
Anyone?
--=20
Phil Dibowitz
Systems Architect and Administrator
Enterprise Infrastructure / ISD / USC
UCC 180 - 213-821-5427
--YOs9+ySvlQ/qtugP
Content-Type: application/pgp-signature
Content-Disposition: inline
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (GNU/Linux)
iD8DBQFCzF3o7lkZ1Iyv898RApbuAJ9MCeA4YA/E7OlDhLM06GADPF82nACcCBes
EKFcyOKc6LywjoDS9kjvK0Y=
=RTiL
-----END PGP SIGNATURE-----
--YOs9+ySvlQ/qtugP--
--===============99936544750924527==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
--===============99936544750924527==--