[32209] in Kerberos
Re: CANT_FIND_CLIENT_KEY
daemon@ATHENA.MIT.EDU (Russ Allbery)
Tue Mar 30 20:18:15 2010
From: Russ Allbery <rra@stanford.edu>
To: Matt Zagrabelny <mzagrabe@d.umn.edu>
In-Reply-To: <1269994401.11234.38.camel@localhost.localdomain> (Matt
Zagrabelny's message of "Tue, 30 Mar 2010 19:13:21 -0500")
Date: Tue, 30 Mar 2010 17:18:11 -0700
Message-ID: <87wrwt8hto.fsf@windlord.stanford.edu>
MIME-Version: 1.0
Cc: kerberos <kerberos@mit.edu>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
Matt Zagrabelny <mzagrabe@d.umn.edu> writes:
> it looks like the mzagrabe principle is missing the:
> Key: vno 1, DES cbc mode with CRC-32, no salt
> How would I add that key to the principle?
Change the password with an enctype setting that allows DES, basically.
If you have something like:
supported_enctypes = des3-cbc-sha1:normal des-cbc-crc:normal aes256-cts:normal
or whatever list you want in your kdc.conf file and you restart kadmind,
that should do it.
--
Russ Allbery (rra@stanford.edu) <http://www.eyrie.org/~eagle/>
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
