On 5/31/2013 8:46 AM, Stephen Frost wrote:
That key type (des-cbc-md5) has looonngggg been deprecated and has
been actively disabled and disallowed from use in modern Kerberos
libraries.
Please go get an AES256 key and install that instead.
Thanks - that was one of my fears - I just double checked and ktpass on
Windows 2000 only gives me DES-CBC-CRC and DES-CBC-MD5 as crypto
options, it won't accept AES256-SHA1. I already did have
allow_weak_crypto on and a Group Policy for Windows 7 clients which did
get it to work & cannot migrate from Windows 2000 just yet...
Josh
root@ss-sv-tmp40:~# cat /etc/krb5.conf
[libdefaults]
default_realm = MYDOMAIN.LOCAL
allow_weak_crypto = true
<snip>
--
Sent via pgsql-admin mailing list (pgsql-admin@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-admin
