[35902] in Kerberos

home help back first fref pref prev next nref lref last post

permitted_enctypes = "des-cbc-crc" triggers 'kinit: Generic error

daemon@ATHENA.MIT.EDU (Wendy Lin)
Thu Mar 20 18:01:33 2014

MIME-Version: 1.0
Date: Thu, 20 Mar 2014 23:01:19 +0100
Message-ID: <CA+j=ERoo0aqigxoAgkyZYfcgzgXssU3aRjfsozrmh0k1Cv6q9g@mail.gmail.com>
From: Wendy Lin <wendlin1974@gmail.com>
To: "<kerberos@mit.edu>" <kerberos@mit.edu>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu

I have this in my Suse 11.3 /etc/krb.conf for libdefaults:

        allow_weak_crypto = true
#       permitted_enctypes = "des-cbc-crc arcfour-hmac des3-cbc-sha1
aes128-cts-hmac-sha1-96 aes256-cts-hmac-sha1-96"
        permitted_enctypes = "des-cbc-crc"

Now if I try to kinit I get this error:

kinit
kinit: Generic error (see e-text) while getting initial credentials

Why?

Wendy
________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

home help back first fref pref prev next nref lref last post