[Samba] Re: Kerberos Error

[Gerald (Jerry) Carter]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Norman Zhang wrote:
|> I'm using samba-*-3.0.6-4.3.100mdk and libkrb51-1.3-6.3.100mdk on
|> LM10.0. A similar summary to what I'm seeing could be found here.
|>
|> http://lists.samba.org/archive/samba/2004-July/090210.html
|
|
| Solve the problem by changing
|
| [libdefaults]
|  ticket_lifetime = 24000
|  default_realm = HQ.ARKONNETWORKS.COM
| ; default_tgs_enctypes = des3-hmac-sha1 des-cbc-crc
| ; default_tkt_enctypes = des3-hmac-sha1 des-cbc-crc
| ; permitted_enctypes = des3-hmac-sha1 des-cbc-crc
|
| default_etypes = des-cbc-crc des-crc-md5
| default_etypes_des = des-cbc-crc des-crc-md5

unless you are pretty comfortable with krb5 enc types
and have a specific reason to use the des keys, I would
recommend not setting those 2 lines at all on MIT
krb 1.3.x releases.





cheers, jerry
- ---------------------------------------------------------------------
Alleviating the pain of Windows(tm)      ------- http://www.samba.org
GnuPG Key                ----- http://www.plainjoe.org/gpg_public.asc
"If we're adding to the noise, turn off this song"--Switchfoot (2003)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFBtwG3IR7qMdg1EfYRAir/AJ9t7u9f24PH/bARPXKt0emKyWtobACfYpAK
7LvcSN/7GohUT7ND14YdUhQ=
=+q/F
-----END PGP SIGNATURE-----