[32121] in Kerberos
RE: Win 2008R2 DES eanble?
daemon@ATHENA.MIT.EDU (Wilper, Ross A)
Thu Mar 4 10:56:59 2010
From: "Wilper, Ross A" <rwilper@stanford.edu>
To: Lars Schimmer <l.schimmer@cgv.tugraz.at>,
"openafs-info@openafs.org"
<openafs-info@openafs.org>,
"kerberos@mit.edu >> kerberos" <kerberos@mit.edu>
Date: Thu, 4 Mar 2010 07:56:51 -0800
Message-ID: <C6BF43271ABC924B9A7057FAD2B4953F06B74FDC68@ITS-ExchMB02.stanford.edu>
In-Reply-To: <4B8FD40E.2070601@cgv.tugraz.at>
Content-Language: en-US
MIME-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Errors-To: kerberos-bounces@mit.edu
Content-Transfer-Encoding: 8bit
There is a Group Policy option in the security options that sets the Allowed encryption types.
>From a Windows 7 or Windows Server 2008 R2 machine:
Create a group policy object on OU=Domain Controllers or use an existing policy
Set the policy option "Network security: Configure encryption types allowed for Kerberos"
Select which enctypes to allow
-Ross
-----Original Message-----
From: kerberos-bounces@MIT.EDU [mailto:kerberos-bounces@MIT.EDU] On Behalf Of Lars Schimmer
Sent: Thursday, March 04, 2010 7:39 AM
To: openafs-info@openafs.org; kerberos@mit.edu >> kerberos
Subject: Win 2008R2 DES eanble?
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Hi!
Sorry for a bit OT question:
I want to extend our AD with a Windows 2008R2 server with KDC enabled.
Now I know I need to enable DES enctype again to be able to use OpenAFS
with such a KDC, but I am a bit lost where to enable this.
Found a few point on google so far:
- -administrative tools for server
- -for each client seperate of the AD
But what is the real solution?
MfG,
Lars Schimmer
- --
- -------------------------------------------------------------
TU Graz, Institut für ComputerGraphik & WissensVisualisierung
Tel: +43 316 873-5405 E-Mail: l.schimmer@cgv.tugraz.at
Fax: +43 316 873-5402 PGP-Key-ID: 0x4A9B1723
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iEYEARECAAYFAkuP1A0ACgkQmWhuE0qbFyNjAQCgi473Qem43r/cOepipBI0MNvR
DDEAn0Y8YmWl0UnGMQfFrwxoQTPNmY+W
=j10e
-----END PGP SIGNATURE-----
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
