[32181] in Kerberos

home help back first fref pref prev next nref lref last post

Re: Win 2008R2 kdc and linux client: no support for encryption type

daemon@ATHENA.MIT.EDU (Jeffrey Altman)
Wed Mar 24 14:19:21 2010

X-Envelope-From: jaltman@secure-endpoints.com
X-MDaemon-Deliver-To: kerberos@mit.edu
Message-ID: <4BAA5794.3050401@secure-endpoints.com>
Date: Wed, 24 Mar 2010 14:19:00 -0400
From: Jeffrey Altman <jaltman@secure-endpoints.com>
MIME-Version: 1.0
To: kerberos@mit.edu
In-Reply-To: <78c6bd861003221452lb0a591en76b704daadc7d1f1@mail.gmail.com>
Reply-To: jaltman@secure-endpoints.com
Content-Type: multipart/mixed; boundary="===============0243721447=="
Errors-To: kerberos-bounces@mit.edu

This is a cryptographically signed message in MIME format.

--===============0243721447==
Content-Type: multipart/signed; protocol="application/pkcs7-signature";
	micalg=sha1; boundary="------------ms060100040109040807030007"

This is a cryptographically signed message in MIME format.

--------------ms060100040109040807030007
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

On 3/22/2010 5:52 PM, Michael B Allen wrote:
> On Mon, Mar 22, 2010 at 12:01 PM, Lars Schimmer
> <l.schimmer@cgv.tugraz.at> wrote:
>> Hi!
>>
>> Just want to note here, that problem was solved with a (not yet public=
)
>> patch from Microsoft.
>> http://support.microsoft.com/?kbid=3D978055
>>
>> Go and ask your Microsoft Support for it.
>>
>> Looks like it only happens on x64 servers.
>
> Hi Lars,
>
> Actually I would not be surprised if that "hot fix" is never made
> public. DES is being phased out. If you have any Windows accounts that
> use DES, you should update them to AES-256, AES-128 or RC4 in that
> order of preference.
>
> Mike
>

I have confirmation from Microsoft that this "hot fix" will be
published.   The failure to publish
this "hot fix" was an oversight.

Jeffrey Altman



--------------ms060100040109040807030007--


--===============0243721447==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

--===============0243721447==--


home help back first fref pref prev next nref lref last post