Henry B. Hotz wrote: > > On Mar 28, 2007, at 4:09 PM, Shawn M Emery wrote: > >> -e enctype >> >> Specifies the encryption type to be used when creating the key >> for >> the master key, which is used to encrypt all principal keys in >> the >> database. The set of valid encryption types used here are >> described >> in krb5.conf(4) under the permitted_enctypes option. >> >> Note that the encryption type specified here must be supported on >> all KDCs else they will not be able to decrypt any of the >> principal >> keys. The default encryption type is des-cbc-crc. > > Sure that's what you want for the default? Is this supposed to > support Solaris 9, or 10+?
Unfortunately, this has to remain at DES, because we assume that any KDC added can be s9-. Or until we have support for multi-enc type master keys. Shawn. --
