On Tue, Jun 07, 2011 at 01:10:23PM -0400, Sam Hartman wrote: > >>>>> "Luk" == Luk Claes <l...@debian.org> writes: > > Luk> On 06/06/2011 05:37 PM, Alberto Gonzalez Iniesta wrote: > >> Adding the following line in the [libdefaults] section of > >> /etc/krb5.conf fixed the problem for me (tm), probably not the > >> best solution, but works: permitted_enctypes = des-cbc-md5 > > Luk> It's probably better to set enable_weak_crypto=yes, does that > Luk> work? > > Hi. > I think I gave Luk the wrong setting. > It's allow_weak_crypto = yes not enable_weak_crypto = yes. > > You should not have to set permitted_enctypes. > Enabling weak_crypto and only setting the des-cbc-crc key with ktadd in > kadmin is supposed to be sufficient.
I have both set: allow_weak_crypto=true permitted_enctypes = des-cbc-md5 And only the... wait I have des-cbc-md5 IIRC, not des-cbc-crc. I'll check that tomorrow. But it's not working after the last upgrade. When I posted yesterday I was running a sid versión from a couple of weeks ago. Probably 1.9, sorry can't remember now. Regards, Alberto -- Alberto Gonzalez Iniesta | Formación, consultoría y soporte técnico agi@(inittab.org|debian.org)| en GNU/Linux y software libre Encrypted mail preferred | http://inittab.com Key fingerprint = 9782 04E7 2B75 405C F5E9 0C81 C514 AF8E 4BA4 01C3 -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
