[Samba] Kerberos enc type [xx] failed
Andrew Bartlett
abartlet at samba.org
Thu Jun 16 00:59:50 GMT 2005
On Wed, 2005-06-15 at 10:46 -0400, Dimitri Yioulos wrote:
> Ephi,
>
> I think I had the same problem once upon a time. I haven't seen your
> krb5.conf, but I added the following to mine in the [libdefaults] section:
>
> default_tkt_enctypes = des-cbc-crc des-cbc-md5
> default_tgs_enctypes = des-cbc-crc des-cbc-md5
This is generally a bad idea. We want to use all the available enc
types, not a restricted subset. I think Jerry had some further advise
on this, but the jist of it was 'don't touch' :-)
Andrew Bartlett
--
Andrew Bartlett http://samba.org/~abartlet/
Samba Developer, SuSE Labs, Novell Inc. http://suse.de
Authentication Developer, Samba Team http://samba.org
Student Network Administrator, Hawker College http://hawkerc.net
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.samba.org/archive/samba/attachments/20050616/e166d72f/attachment.bin
More information about the samba
mailing list