[35903] in Kerberos
Re: permitted_enctypes = "des-cbc-crc" triggers 'kinit: Generic
daemon@ATHENA.MIT.EDU (steve)
Thu Mar 20 18:27:09 2014
Message-ID: <1395354403.2838.1.camel@hh16.hh3.site>
From: steve <steve@steve-ss.com>
To: kerberos@mit.edu
Date: Thu, 20 Mar 2014 23:26:43 +0100
In-Reply-To: <CA+j=ERoo0aqigxoAgkyZYfcgzgXssU3aRjfsozrmh0k1Cv6q9g@mail.gmail.com>
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
On Thu, 2014-03-20 at 23:01 +0100, Wendy Lin wrote:
> I have this in my Suse 11.3 /etc/krb.conf for libdefaults:
>
> allow_weak_crypto = true
> # permitted_enctypes = "des-cbc-crc arcfour-hmac des3-cbc-sha1
> aes128-cts-hmac-sha1-96 aes256-cts-hmac-sha1-96"
> permitted_enctypes = "des-cbc-crc"
>
> Now if I try to kinit I get this error:
>
> kinit
> kinit: Generic error (see e-text) while getting initial credentials
>
> Why?
>
> Wendy
Hi
Do you have DNS configured properly?
Add:
dns_lookup_realm = false
dns_lookup_kdc = true
to [libdefaults]
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
