Re: Getting single DES TGT[was Re: KDC: upgrade to 3DES]

2005-04-08 Thread Jeffrey Altman
Craig Huckabee wrote: I did some testing last night on a demo realm I have on a private network - whatever enctype is listed first for the krbtgt principal is the one selected for the tkt no matter what the client asks for. The skey gets selected as expected when default_tgs_enctypes is

Re: Getting single DES TGT

2005-04-08 Thread Sam Hartman
Craig == Craig Huckabee [EMAIL PROTECTED] writes: Craig Hi all, I saw this discussion on krb-dev on moving to 3DES Craig support and wanted to ask a similar question (hopefully Craig more appropriately on this list). CraigWe're trying to use the Advanced Security Option in

Re: Getting single DES TGT

2005-04-08 Thread Jeffrey Hutzelman
On Thursday, April 07, 2005 05:35:59 PM -0400 Sam Hartman [EMAIL PROTECTED] wrote: The best you can do is use the -e argument of the kvno program to request a des-cbc-crc ticket for the appropriate oracle service principal before you start Oracle. The other thing you should do is file a TAR

Re: Getting single DES TGT

2005-04-08 Thread Craig Huckabee
Jeffrey Hutzelman wrote: On Thursday, April 07, 2005 05:35:59 PM -0400 Sam Hartman [EMAIL PROTECTED] wrote: The best you can do is use the -e argument of the kvno program to request a des-cbc-crc ticket for the appropriate oracle service principal before you start Oracle. The other thing you