On Tue, Aug 2, 2011 at 10:36 AM, Simon Wilkinson <s...@inf.ed.ac.uk> wrote: > On 2 Aug 2011, at 15:09, Derrick Brashear <sha...@gmail.com> wrote: > >> #define KRB5_PROG_ETYPE_NOSUPP (-1765328234L) >> >> set the >> allow_weak_crypto = yes >> option in /Library/Preferences/edu.mit.Kerberos > > Firstly, I thought that the 1.6 aklog converted both Kerberos and AFS errors > into text. Secondly, aklog should be telling Kerberos to allow the use of > single DES enctypes, without requiring allow_weak_crypto. Is this all broken > by Lion, or do you have an old aklog binary in your path? >
That would presume the APIs needed to do both those things worked. [scully:openafs/src/aklog] shadow% nm /System//Library/Frameworks/Kerberos.framework/Kerberos|egrep -i 'krb5_enctype_enable|krb5_allow_weak_crypto' [scully:openafs/src/aklog] shadow% So, you can't have that. The error_table call should be supported but I haven't looked yet to see why it fails. It's not a dummy call in MITKerberosShim. -- Derrick _______________________________________________ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info
