[35908] in Kerberos
Re: permitted_enctypes = "des-cbc-crc" triggers 'kinit: Generic
daemon@ATHENA.MIT.EDU (Benjamin Kaduk)
Fri Mar 21 11:06:22 2014
Date: Fri, 21 Mar 2014 11:06:04 -0400 (EDT)
From: Benjamin Kaduk <kaduk@mit.edu>
To: =?KOI8-R?B?z8zYx8Egy9LZ1sHOz9fTy8HR?= <olga.kryzhanovska@gmail.com>
In-Reply-To: <CA+OH3v3Fk1O6No=okdx+rTbHfohN7cr_B1z6S+xxXKvdx5mb_g@mail.gmail.com>
Message-ID: <alpine.GSO.1.10.1403211104230.21026@multics.mit.edu>
MIME-Version: 1.0
Content-Type: MULTIPART/MIXED;
BOUNDARY="-559023410-1909773849-1395414364=:21026"
Cc: "<kerberos@mit.edu>" <kerberos@mit.edu>
Errors-To: kerberos-bounces@mit.edu
This message is in MIME format. The first part should be readable text,
while the remaining parts are likely unreadable without MIME-aware tools.
---559023410-1909773849-1395414364=:21026
Content-Type: TEXT/PLAIN; charset=KOI8-R; format=flowed
Content-Transfer-Encoding: QUOTED-PRINTABLE
On Fri, 21 Mar 2014, =CF=CC=D8=C7=C1 =CB=D2=D9=D6=C1=CE=CF=D7=D3=CB=C1=D1 w=
rote:
> Plain des-cbc-crc only authentication doesn't seem to be supported, any m=
ore:
Most likely, you still have the 'allow_weak_crypto' setting in krb5.conf=20
at its default value, false.
-Ben
> $ kadmin
> Authenticating as principal root/admin@MINIPAX.TERRORONWAR.ORG with passw=
ord.
> kadmin: KDC has no support for encryption type while initializing
> kadmin interface
>
> Olga
>
> On Thu, Mar 20, 2014 at 11:32 PM, Benjamin Kaduk <kaduk@mit.edu> wrote:
>> On Thu, 20 Mar 2014, Wendy Lin wrote:
>>
>>> I have this in my Suse 11.3 /etc/krb.conf for libdefaults:
>>>
>>> allow_weak_crypto =3D true
>>> # permitted_enctypes =3D "des-cbc-crc arcfour-hmac des3-cbc-sha1
>>> aes128-cts-hmac-sha1-96 aes256-cts-hmac-sha1-96"
>>> permitted_enctypes =3D "des-cbc-crc"
>>>
---559023410-1909773849-1395414364=:21026
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
---559023410-1909773849-1395414364=:21026--
