On Sun, 2004-07-25 at 01:22, Sam Hartman wrote: > >>>>> "Kevin" == Kevin Coffman <[EMAIL PROTECTED]> writes: > > Kevin> Ignore me. I wasn't restarting my client between changes > Kevin> of krb5.conf. After restarting the client, it seems to be > Kevin> honoring the config file options and negotiating a > Kevin> des-cbc-crc service ticket. > > It's really kind of unfortunate that your kernel module does not > support des-cbc-md4. Asking people to change their krb5.confs is > unacceptable from an administration stand point, because they won't > remember to remove the changes when their site starts supporting 3des > or aes. > > > Unfortunately your module seems to be the only thing that doesn't > support des-cbc-md4.
More of a worry to me is the lack of support for rc4-hmac-md5. Sites playing with Samba/Heimdal integration, and sites using Active Directory often simply have no other keytypes reliably available! Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Authentication Developer, Samba Team http://samba.org Student Network Administrator, Hawker College [EMAIL PROTECTED]
signature.asc
Description: This is a digitally signed message part
________________________________________________ Kerberos mailing list [EMAIL PROTECTED] https://mailman.mit.edu/mailman/listinfo/kerberos
