On Wed, 16 Mar 2005, daylebo wrote: > From: daylebo <[EMAIL PROTECTED]> > To: kerberos@mit.edu > Date: 16 Mar 2005 04:19:09 -0800 > Subject: Re: Kerberos and windows problem ... > > > Windows does not support 3DES. You must only generate RC4 or > > single DES keys for the host principal. In general, if you have > > support for RC4 then do not generate DES at all. > > pls can u give me a few more details how to do teh above... i > checked in the kadmin util .. but me can't find any option for > RC4...
It's the -e option to the addprinc, ktadd etc commands in kadmin. Specify one or more of the encryption types specified in the System Administrator's Guide. For example: addprinc -e "rc4-hmac:normal des-cbc-md4:normal" ... (Oh boy, I hope I've got that right. Never used it myself, always relied on the defaults :-) -- Dennis Davis, BUCS, University of Bath, Bath, BA2 7AY, UK [EMAIL PROTECTED] Phone: +44 1225 386101 ________________________________________________ Kerberos mailing list Kerberos@mit.edu https://mailman.mit.edu/mailman/listinfo/kerberos
