On Fri, Mar 21, 2008 at 06:45:01PM -0800, Paul B. Henson wrote:
> 
> Is there any way to get rpc.gssd to request DES session keys without
> crippling the entire system's encryption level?
> 
I used this HOWTO:
http://www-theorie.physik.unizh.ch/~dpotter/howto/kerberos

The crux of it is something like this:

  [EMAIL PROTECTED] ~]# kadmin
  Authenticating as principal root/[EMAIL PROTECTED] with password.
  Password for root/[EMAIL PROTECTED]: 
  kadmin: ktadd host/phoenix.physik.unizh.ch
  kadmin: ktadd -e des-cbc-crc:normal nfs/phoenix.physik.unizh.ch

That worked well for me.  It lets me have DES only for NFS and 3DES for
everything else.

Regards,

-Roberto

-- 
Roberto C. Sánchez
http://people.connexer.com/~roberto
http://www.connexer.com

Attachment: signature.asc
Description: Digital signature

________________________________________________
Kerberos mailing list           [email protected]
https://mailman.mit.edu/mailman/listinfo/kerberos

Reply via email to