[Freeipa-users] scripting question

2014-11-26 Thread Richard Betel
I'm trying to debug a script that is supposed to auto-setup kerberos for
Hadoop. Its not working, and I've boiled down the problem to the fact that
for some reason, it wants to use DES as the encryption type. There is no
good reason for this, since both freeIPA and Hadoop support modern
encryptions, so I want to fix the script. Is there a way for a script to
query IPA for the supported encryption types?

-- 
http://www2.charitydynamics.com/site/PageServer?pagename=Boundless_Email_Client
-- 
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go To http://freeipa.org for more info on the project

Re: [Freeipa-users] scripting question

2014-11-26 Thread Rob Crittenden
Richard Betel wrote:
 I'm trying to debug a script that is supposed to auto-setup kerberos for
 Hadoop. Its not working, and I've boiled down the problem to the fact
 that for some reason, it wants to use DES as the encryption type. There
 is no good reason for this, since both freeIPA and Hadoop support modern
 encryptions, so I want to fix the script. Is there a way for a script to
 query IPA for the supported encryption types?  
 

You can find it in cn=EXAMPLE.COM,cn=kerberos,dc=example,dc=com

$ ldapsearch -Y GSSAPI -s base -b
cn=EXAMPLE.COM,cn=kerberos,dc=example,dc=com krbDefaultEncSaltTypes

rob

-- 
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go To http://freeipa.org for more info on the project


Re: [Freeipa-users] scripting question

2014-11-26 Thread Simo Sorce
On Wed, 26 Nov 2014 10:28:00 -0500
Richard Betel emte...@gmail.com wrote:

 I'm trying to debug a script that is supposed to auto-setup kerberos
 for Hadoop. Its not working, and I've boiled down the problem to the
 fact that for some reason, it wants to use DES as the encryption
 type. There is no good reason for this, since both freeIPA and Hadoop
 support modern encryptions, so I want to fix the script. Is there a
 way for a script to query IPA for the supported encryption types?

Why don't you just go with the defaults ?

Simo.

-- 
Simo Sorce * Red Hat, Inc * New York

-- 
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go To http://freeipa.org for more info on the project