Richard Betel wrote: > I'm trying to debug a script that is supposed to auto-setup kerberos for > Hadoop. Its not working, and I've boiled down the problem to the fact > that for some reason, it wants to use DES as the encryption type. There > is no good reason for this, since both freeIPA and Hadoop support modern > encryptions, so I want to fix the script. Is there a way for a script to > query IPA for the supported encryption types? >
You can find it in cn=EXAMPLE.COM,cn=kerberos,dc=example,dc=com $ ldapsearch -Y GSSAPI -s base -b cn=EXAMPLE.COM,cn=kerberos,dc=example,dc=com krbDefaultEncSaltTypes rob -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go To http://freeipa.org for more info on the project
