>>>>> "Tim" == Tim Clarke <[EMAIL PROTECTED]> writes:

    Tim> How do I change the tkt etype to be DES-CBC-CRC

You don't.  Or at least a reasonable Kerberos implementation does not
allow the client to influence the tkt enctype.  If it does, then the
client may force the KDC to use a ticket key that is weaker or easier
to attack.

Microsoft's implementation may expose this, but if it does it is only
for interoperability with broken Kerberosenvironments.

________________________________________________
Kerberos mailing list           [EMAIL PROTECTED]
https://mailman.mit.edu/mailman/listinfo/kerberos

Reply via email to