On Fri, 07 Nov 2014 16:05:11 +0100 Andreas Ladanyi <[email protected]> wrote:
> sorry i didnt told that. In FreeIPA you must enable the DES salttype. I > enabled the des-cbc-crc:normal and des-cbc-crc:v4. I'm not too familiar with FreeIPA, but usually you need to enable "weak enctypes" separately from enabling DES specifically. That is, you need to turn on those specific enctypes (for the principal, and possibly for the whole KDC), but you also need to enable "weak crypto" in krb5.conf like Brandon mentioned. Or maybe what you did for this was correct, and something else is the problem. I'm sending some other things to try out in a moment. -- Andrew Deason [email protected] _______________________________________________ OpenAFS-info mailing list [email protected] https://lists.openafs.org/mailman/listinfo/openafs-info
