For some reason, we're still getting a DES session key after removing
the KeyFile on all OpenAFS-servers, and touching CellServDB, according
to these instructions:
https://www.openafs.org/pages/security/install-rxkad-k5-1.6.txt
Old clients still work even though there is no DES in rxkad.keytab.
klist -v shows:
...
Server: krbtgt/[email protected]
...
Ticket etype: arcfour-hmac-md5, kvno 1
Session key: aes256-cts-hmac-sha1-96
Server: afs/[email protected]
...
Ticket etype: aes256-cts-hmac-sha1-96, kvno 3
Session key: des-cbc-crc
What can be the cause of this?
/Staffan
IT-Service
LTU
_______________________________________________
OpenAFS-info mailing list
[email protected]
https://lists.openafs.org/mailman/listinfo/openafs-info
