[Samba] Kerberos enc type [xx] failed

Andrew Bartlett abartlet at samba.org
Thu Jun 16 00:59:50 GMT 2005


On Wed, 2005-06-15 at 10:46 -0400, Dimitri Yioulos wrote:
> Ephi,
> 
> I think I had the same problem once upon a time.  I haven't seen your 
> krb5.conf, but I added the following to mine in the [libdefaults] section:
> 
>  default_tkt_enctypes = des-cbc-crc des-cbc-md5
>  default_tgs_enctypes = des-cbc-crc des-cbc-md5

This is generally a bad idea.  We want to use all the available enc
types, not a restricted subset.  I think Jerry had some further advise
on this, but the jist of it was 'don't touch' :-)

Andrew Bartlett

-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Samba Developer, SuSE Labs, Novell Inc.        http://suse.de
Authentication Developer, Samba Team           http://samba.org
Student Network Administrator, Hawker College  http://hawkerc.net
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.samba.org/archive/samba/attachments/20050616/e166d72f/attachment.bin


More information about the samba mailing list