Richard Betel wrote:
> I'm trying to debug a script that is supposed to auto-setup kerberos for
> Hadoop. Its not working, and I've boiled down the problem to the fact
> that for some reason, it wants to use DES as the encryption type. There
> is no good reason for this, since both freeIPA and Hadoop support modern
> encryptions, so I want to fix the script. Is there a way for a script to
> query IPA for the supported encryption types?  
> 

You can find it in cn=EXAMPLE.COM,cn=kerberos,dc=example,dc=com

$ ldapsearch -Y GSSAPI -s base -b
cn=EXAMPLE.COM,cn=kerberos,dc=example,dc=com krbDefaultEncSaltTypes

rob

-- 
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go To http://freeipa.org for more info on the project

Reply via email to