[Freeipa-users] scripting question
I'm trying to debug a script that is supposed to auto-setup kerberos for Hadoop. Its not working, and I've boiled down the problem to the fact that for some reason, it wants to use DES as the encryption type. There is no good reason for this, since both freeIPA and Hadoop support modern encryptions, so I want to fix the script. Is there a way for a script to query IPA for the supported encryption types? -- http://www2.charitydynamics.com/site/PageServer?pagename=Boundless_Email_Client -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go To http://freeipa.org for more info on the project
Re: [Freeipa-users] scripting question
Richard Betel wrote: I'm trying to debug a script that is supposed to auto-setup kerberos for Hadoop. Its not working, and I've boiled down the problem to the fact that for some reason, it wants to use DES as the encryption type. There is no good reason for this, since both freeIPA and Hadoop support modern encryptions, so I want to fix the script. Is there a way for a script to query IPA for the supported encryption types? You can find it in cn=EXAMPLE.COM,cn=kerberos,dc=example,dc=com $ ldapsearch -Y GSSAPI -s base -b cn=EXAMPLE.COM,cn=kerberos,dc=example,dc=com krbDefaultEncSaltTypes rob -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go To http://freeipa.org for more info on the project
Re: [Freeipa-users] scripting question
On Wed, 26 Nov 2014 10:28:00 -0500 Richard Betel emte...@gmail.com wrote: I'm trying to debug a script that is supposed to auto-setup kerberos for Hadoop. Its not working, and I've boiled down the problem to the fact that for some reason, it wants to use DES as the encryption type. There is no good reason for this, since both freeIPA and Hadoop support modern encryptions, so I want to fix the script. Is there a way for a script to query IPA for the supported encryption types? Why don't you just go with the defaults ? Simo. -- Simo Sorce * Red Hat, Inc * New York -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go To http://freeipa.org for more info on the project