Sorry for the duplicate mails. My e-mail client hang and send it multiple 
times

Markus
"Markus Moeller" <[EMAIL PROTECTED]> wrote in message 
news:[EMAIL PROTECTED]
> Norbert Klasen wrote:
>>
>>
>> --On Freitag, 17. September 2004 20:35 +0000 Jeffrey Altman 
>> <[EMAIL PROTECTED]> wrote:
>>
>>> Jacques Lebastard wrote:
>>>
>>>> How can I check this and, second question, how can I generate a keytab
>>>> with RC4-HMAC encryption ? The ktpass tool does not accept the RC4-HMAC
>>>> crypto type:
>>>>
>>>> [- /]       crypto : Cryptosystem to use
>>>> [- /]       crypto :  is one of:
>>>> [- /]       crypto : DES-CBC-CRC : for compatibility
>>>> [- /]       crypto : DES-CBC-MD5 : default
>>>>
>>>> Trying '-crypto RC4-HMAC' indicates that the SPN is marked for DES only
>>>> ! How can I modify this ?
>>>>
>>>> Thanks for your help,
>>>
>>>
>>> You need to use the KTPASS.EXE from the SUPPORT folder of Windows 2003
>>> SP1 pre-release in order to generate a keytab with RC4-HMAC.
>>
>>
>> If you don't need a separate service account you can use Samba >= 3.0.6. 
>> and join the host into your AD domain. With "use kerberos keytab = yes" 
>> in smb.conf, Samba will populate your keytab with all known enc-types:
>>  2  des3-cbc-sha1     host/[EMAIL PROTECTED]
>>  2  des3-cbc-md5      host/[EMAIL PROTECTED]
>>  2  arcfour-hmac-md5  host/[EMAIL PROTECTED]
>>  2  des-cbc-md5       host/[EMAIL PROTECTED]
>>  2  des-cbc-md4       host/[EMAIL PROTECTED]
>>  2  des-cbc-crc       host/[EMAIL PROTECTED]
>>  2  des3-cbc-sha1     cifs/[EMAIL PROTECTED]
>> [..]
>>
>> The keytab can be managed (e.g. add another principal) with "net ads 
>> keytab".
>>
>> Norbert
>> ________________________________________________
>> Kerberos mailing list           [EMAIL PROTECTED]
>> https://mailman.mit.edu/mailman/listinfo/kerberos
>>
>
> Have a look at http://sourceforge.net/projects/netjoin
>
> Markus
>
> ________________________________________________
> Kerberos mailing list           [EMAIL PROTECTED]
> https://mailman.mit.edu/mailman/listinfo/kerberos
> 



________________________________________________
Kerberos mailing list           [EMAIL PROTECTED]
https://mailman.mit.edu/mailman/listinfo/kerberos

Reply via email to