On 12/15/2011 12:52 PM, Eric Sturdivant wrote: > On Thu, 15 Dec 2011, Jeffrey Altman wrote: > >> 32-bit NIM requires the krbv4w32.dll and krb524.dll from MIT KFW. >> A future Heimdal distribution will bundle them as an optional install >> item and a future NIM distribution will stop supporting Kerberos v4 >> entirely. >> >> For now you can copy the DLLs from the MIT distribution and place them >> in your PATH. >> > > This gets us a bit further, but now NIM fails getting AFS tokens. The > error message is "Credentials could not be obtained for cell glue.umd.edu". > > aklog -d shows: > > C:\Users\Administrator>aklog -d > Authenticating to cell glue.umd.edu. > Getting v5 tickets: afs/[email protected] > Kerberos error code returned by get_cred: -1765328234 > aklog: Couldn't get glue.umd.edu AFS tickets: encryption type > des-cbc-crc is disabled
Kerberos distributions built after 2009 no longer permit DES as an encryption type by default. This is true for Microsoft, Apple, MIT, Heimdal, etc. To enable DES on the client, add [libdefaults] allow_weak_crypto = true Future builds of OpenAFS with native Heimdal support will not require this. Jeffrey Altman
signature.asc
Description: OpenPGP digital signature
