Dirk Heinrichs wrote: > Hi, > > I've just installed a new cell, using MIT Krb5 1.4.3 and OpenAFS 1.4.1. For > the afs/cellname principal I have used enctype des-cbc-crc:normal. Now I > wonder wether this was my only choice or could I just have used another > (more secure) enctype? Is there a list of K5 enctypes I can use for AFS? > > Bye... > > Dirk
At the moment the requirement is that the service key and the session key be limited to one of the single DES types. DES-CBC-CRC, DES-CBC-MD5, DES-CBC-MD4. In some future we will support stronger encryption types. Jeffrey Altman
smime.p7s
Description: S/MIME Cryptographic Signature
