[24226] in Kerberos

home help back first fref pref prev next nref lref last post

Re: Updating encryption types

daemon@ATHENA.MIT.EDU (Phil Dibowitz)
Wed Jul 6 18:41:49 2005

Date: Wed, 6 Jul 2005 15:40:41 -0700
From: Phil Dibowitz <phil@usc.edu>
To: kerberos@mit.edu
Message-ID: <20050706224041.GT27759@usc.edu>
Mail-Followup-To: kerberos@mit.edu
Mime-Version: 1.0
In-Reply-To: <20050705204853.GE27759@usc.edu>
Content-Type: multipart/mixed; boundary="===============99936544750924527=="
Errors-To: kerberos-bounces@mit.edu


--===============99936544750924527==
Content-Type: multipart/signed; micalg=pgp-sha1;
	protocol="application/pgp-signature"; boundary="YOs9+ySvlQ/qtugP"
Content-Disposition: inline


--YOs9+ySvlQ/qtugP
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Tue, Jul 05, 2005 at 01:48:54PM -0700, Phil Dibowitz wrote:
> from kadmin, great (though is that "no salt" supposed to be there?)!
>=20
> However, klist -e shows:
>=20
> [phil@frantic unstale]$ klist -e
> Ticket cache: FILE:/tmp/krb5cc_36070
> Default principal: phil@ISD.USC.EDU
>=20
> Valid starting     Expires            Service principal
> 07/05/05 13:36:31  07/05/05 23:36:31  krbtgt/ISD.USC.EDU@ISD.USC.EDU
>         Etype (skey, tkt): DES cbc mode with CRC-32, DES cbc mode with CR=
C-32=20
> [phil@frantic unstale]$=20
>=20
> and the logs show:
>=20
> Jul 05 13:36:31 frantic.usc.edu krb5kdc[26284](info): AS_REQ (3 etypes {2=
3 16
> 1}) 128.125.10.120: ISSUE: authtime 1120595791, etypes {rep=3D23 tkt=3D1 =
ses=3D1},
> phil@ISD.USC.EDU for krbtgt/ISD.USC.EDU@ISD.USC.EDU
>=20
> Neither the session key, nor my principal key seem to have been using the=
 new
> encryption... it's not clear to me why...


Anyone?


--=20
Phil Dibowitz
Systems Architect and Administrator
Enterprise Infrastructure / ISD / USC
UCC 180 - 213-821-5427


--YOs9+ySvlQ/qtugP
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (GNU/Linux)

iD8DBQFCzF3o7lkZ1Iyv898RApbuAJ9MCeA4YA/E7OlDhLM06GADPF82nACcCBes
EKFcyOKc6LywjoDS9kjvK0Y=
=RTiL
-----END PGP SIGNATURE-----

--YOs9+ySvlQ/qtugP--

--===============99936544750924527==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit

________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

--===============99936544750924527==--

home help back first fref pref prev next nref lref last post