Re: [Freeipa-users] KDC has no support for encryption type

2015-01-05 Thread Petr Spacek
On 29.12.2014 23:31, Matt . wrote: But should an IPA install not add them by default ? Maybe this is some I'm not sure that I understand what you mean, but DES is disabled on purpose because it is completely insecure nowadays. Maybe you should try to rule it out from your deployment. According

Re: [Freeipa-users] KDC has no support for encryption type

2015-01-02 Thread Dmitri Pal
On 12/30/2014 06:06 AM, Matt . wrote: Readin up on this the weak password setting should work, but it doesn't. What are my chances here as I need to do a ipa pwpolicy-mod --maxlife 200 This touches the expiration not the encryption types. Or can this be done from a ldap browser too ? Yes.

[Freeipa-users] KDC has no support for encryption type

2014-12-29 Thread Matt .
Hi All, Why doing some IPA commands on my 4.1.2 install I get the following error: ipa: ERROR: Kerberos error: Kerberos error: ('Unspecified GSS failure. Minor code may provide more information', 851968)/('KDC has no support for encryption type', -1765328370)/ I already tried