[32166] in Kerberos

home help back first fref pref prev next nref lref last post

Re: Win 2008R2 kdc and linux client: no support for encryption type

daemon@ATHENA.MIT.EDU (Michael B Allen)
Mon Mar 22 17:52:14 2010

MIME-Version: 1.0
In-Reply-To: <4BA79444.6020303@cgv.tugraz.at>
Date: Mon, 22 Mar 2010 17:52:08 -0400
Message-ID: <78c6bd861003221452lb0a591en76b704daadc7d1f1@mail.gmail.com>
From: Michael B Allen <ioplex@gmail.com>
To: Lars Schimmer <l.schimmer@cgv.tugraz.at>
Cc: kerberos@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu

On Mon, Mar 22, 2010 at 12:01 PM, Lars Schimmer
<l.schimmer@cgv.tugraz.at> wrote:
> Hi!
>
> Just want to note here, that problem was solved with a (not yet public)
> patch from Microsoft.
> http://support.microsoft.com/?kbid=978055
>
> Go and ask your Microsoft Support for it.
>
> Looks like it only happens on x64 servers.

Hi Lars,

Actually I would not be surprised if that "hot fix" is never made
public. DES is being phased out. If you have any Windows accounts that
use DES, you should update them to AES-256, AES-128 or RC4 in that
order of preference.

Mike

-- 
Michael B Allen
Java Active Directory Integration
http://www.ioplex.com/
________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

home help back first fref pref prev next nref lref last post