[33495] in Kerberos
Re: cross-realm with windows 2k3 ad
daemon@ATHENA.MIT.EDU (Mark Davies)
Sun Jun 19 08:07:21 2011
From: Mark Davies <mark@ecs.vuw.ac.nz>
To: kerberos@mit.edu
Date: Mon, 20 Jun 2011 00:06:57 +1200
In-Reply-To: <4DFB9821.4010906@anl.gov>
MIME-Version: 1.0
Message-Id: <201106200006.58070.mark@ecs.vuw.ac.nz>
Cc: "Douglas E. Engert" <deengert@anl.gov>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
On Saturday 18 June 2011 06:08:33 Douglas E. Engert wrote:
> > surely the rc4-hmac type should be supported?
>
> Yes it should be. But when you setup the cross realm trust,
> did W2K3 assume the MIT realm could only do DES?
> Id the des-only bit on in the TGT account in AD?
How does one check in AD? and change it if it is?
> DES is off by default in most Kerberos and W2008.
That I knew, but don't know anything about the "des-only bit".
cheers
mark
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
