kadmin ktadd -e keysaltlist for des-cbc-md5

2006-09-12 Thread Tom Simons
I'm trying to get a keytab with des-cbc-md5 encryption (no salt) from our kerberos 1.5 realm for a CyberSafe client. How do I specify the ktadmin ktadd command's -e keysaltlist parameter? I tried variations on ktadd -k filename -e ENCTYPE_DES_CBC_MD5:NONE, but get the same error: kadmin:

Re: use of AES keys with kinit

2006-09-11 Thread Tom Simons
On 9/11/06, Ken Raeburn [EMAIL PROTECTED] wrote: On Sep 11, 2006, at 14:26, Rich Frobose wrote: I find that when I have a principal with both a DES key and an AES128 key then I cannot use kinit to authenticate using a keytab file that only has the AES128 key. I would like to know why I

Re: Windows 2003 Kerberos Encryption Types

2005-03-11 Thread Tom Simons
We were told by Microsoft that neither DES3 nor AES are available in Windows 2003. On Fri, 11 Mar 2005 10:46:33 -0800 (PST), John Harris [EMAIL PROTECTED] wrote: Greetings, I am trying to validate/refute which encryption types the Windows 2003 Kerberos server will support. We know in 2000

krb5-1.4 make error: undefined reference to `tgetent'

2005-02-08 Thread Tom Simons
I'm getting error undefined reference to `tgetent' when compiling krb5-1.4. A google search said to add -libncurses to LIBS in the Makefile, but there are LOTS of Makefiles in krb5-1.4/src. Is there a simpler way to get libncurses added to LIB in all Makefiles? $ ./configure --without-krb4 $