[
https://issues.apache.org/jira/browse/SLIDER-1057?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15097566#comment-15097566
]
Steve Loughran commented on SLIDER-1057:
----------------------------------------
how about we add a --keylength param, default= 256?
> Kdiag: dump and tell if AES 256 is enabled or not
> -------------------------------------------------
>
> Key: SLIDER-1057
> URL: https://issues.apache.org/jira/browse/SLIDER-1057
> Project: Slider
> Issue Type: Improvement
> Reporter: Kai Zheng
>
> This would improve Kdiag tool allowing it to dump relevant information and
> tell if AES 256 is enabled or not on the host. If not, prompt users to
> install the JCE Policy File according to [JCE Unlimited Strength Jurisdiction
> Policy
> File|http://www.oracle.com/technetwork/java/javase/downloads/index.html].
> This is important because a common issue when deploying Kerberos is, AES-256
> encryption type is configure and used in {{krb5.conf}}, but in JRE AES-256
> isn't enabled by default in a typical Oracle Java installation.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
