Jason D. McCormick wrote: > Douglas E. Engert wrote: > >> The problem might be that on the AD account the UserAccountControl flag >> does not have the USE_DES_KEY_ONLY 0x200000 set, So AD is returning an >> ArcFour ticket, which is not in the keytab. ktpass has a /DESOnly option >> to set this. >> >> See kb 305144 too. > > I'll give that a shot, thanks. > >> Why are you using DES? All the newer Kerberos can use ArcFour. So try >> ktpass witout the crypto option. > > Do you know if the Linux NFSv4 stuff can use ArcFour? I've only been > able to find (older - circa '06) docs that state the only working type > is des-cbc-crc.
Don't know, but a lot of the developers on the [EMAIL PROTECTED] list are also on the Kerberos list. > > - Jason > > > -- Douglas E. Engert <[EMAIL PROTECTED]> Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444 ________________________________________________ Kerberos mailing list [email protected] https://mailman.mit.edu/mailman/listinfo/kerberos
