Kai Zheng created SLIDER-1057:
---------------------------------

             Summary: Kdiag: dump and tell if AES 256 is enabled or not
                 Key: SLIDER-1057
                 URL: https://issues.apache.org/jira/browse/SLIDER-1057
             Project: Slider
          Issue Type: Improvement
            Reporter: Kai Zheng


This would improve Kdiag tool allowing it to dump relevant information and tell 
if AES 256 is enabled or not on the host. If not, prompt users to install the 
JCE Policy File according to [JCE Unlimited Strength Jurisdiction Policy 
File|http://www.oracle.com/technetwork/java/javase/downloads/index.html]. This 
is important because a common issue when deploying Kerberos is, AES-256 
encryption type is configure and used in {{krb5.conf}}, but in JRE AES-256 
isn't enabled by default in a typical Oracle Java installation.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to