Re: Encryption key type order w. windows auth?

2004-06-22 Thread Sam Hartman
Jeffrey == Jeffrey Hutzelman [EMAIL PROTECTED] writes: Jeffrey You should not depend on the ordering you're seeing Jeffrey here; logically, it's an unordered set. If you have Jeffrey Windows users, they will need to not have AFS-salted Jeffrey keys. Last time I checked the

Re: Encryption key type order w. windows auth?

2004-06-22 Thread David Botsch
Gotten around the problem by using the following keys in this order: supported_enctypes = des3-cbc-sha1:normal des-cbc-md5:normal des-cbc-crc:afs3 Windows is happy, linux just works. Interestingly enough, kerb4 authenticated login on the Macs broke for anyone that had changed their pw and had

Re: Encryption key type order w. windows auth?

2004-06-18 Thread Jeffrey Hutzelman
On Thursday, June 17, 2004 21:49:34 -0400 David Botsch [EMAIL PROTECTED] wrote: Ok... however, since Windows can come up with the other string to key algorithm, why does authentication not work? Because when it constructs an AS-REP, the KDC gets to choose which of the user's keys will be used,