On 19 Jul 2002, Tom Yu wrote: TY> kejzlar> kdc.conf: kejzlar> supported_enctypes = des:normal TY> des:onlyrealm des:norealm des-cbc-crc:v4 des-cbc-crc:afs3 TY> TY> Are all of these keysalts necessary for your installation?
Not actually (but probably we still need :v4 for compatibility issues). I
tried different setups, the last one is copy of our production server
config files -- not touched from our V4->V5 migration ...
TY> If you set the kdc.conf's supported_enctypes to be
TY> "des-cbc-crc:normal" and then change the password for an affected
TY> principal, does it start to work?
Not (even if does, I'm unable to force all our users to change their
passwords just after migration :-().
Best regards,
Lubos
--------------------------------------------------------------------------
Lubos Kejzlar
System and Network Specialist
Laboratory for Computer Science Tel.: ++420-19-7491536
University of West Bohemia ++420-19-7421414
Univerzitni 8, 30614 Pilsen Fax: ++420-19-7421419
Czech Republic E-mail: [EMAIL PROTECTED]
PGP Key fingerprint = 5621 06DA 3EDE 5D15 F287 5408 9B8E C766 CD64 3A3F
--------------------------------------------------------------------------
smime.p7s
Description: S/MIME Cryptographic Signature
