Christopher D. Clausen wrote: > Ken Hornstein <[EMAIL PROTECTED]> wrote: >>> ktpass -princ afs/<cell>@<REALM> -mapuser <city>_afs -pass * -crypto >>> DES-CBC-MD5 -out c:\temp\unixkeytab >> >> I thought this was fixed in some version of OpenAFS ... but generally >> you should use DES-CBC-CRC instead of DES-CBC-MD5.
For a DES key it doesn't matter. The checksum type does not affect the key that is exported. The checksum only matters when the key is used. > I was under the impression that Windows 2003 did not support DES-CBC-CRC > and that you had to use DES-CBC-MD5 instead. Windows 2003 will use DES-CBC-MD5 in preference to DES-CBC-CRC whenever it has the option. Jeffrey Altman
smime.p7s
Description: S/MIME Cryptographic Signature
