Re: Heimdal and Digest service
Fredrik Pettai <[email protected]>
| Newsgroups | gmane.comp.encryption.kerberos.heimdal.general |
|---|---|
| Message-ID | <[email protected]> |
On Apr 24, 2014, at 12:43 , Fredrik Pettai <[email protected]> wrote: > On Apr 24, 2014, at 10:37 , Yoann Gini <[email protected]> wrote: > >> Hello, >> >> I use Heimdal as my only password database and it work like a charm. >> >> But I’ve one problem, one of my services (SIP) support only DIGEST authentication… >> >> I’ve build my Heimdal 1.5.2 on FreeBSD 10 with the DIGEST support, but I didn’t find any documentation to use it… >> >> What am I supposed to do to use Heimdal as a authentication backend for service who need DIGEST authentication ? > > There is little written about it at random places on the Internet… > > But in short, you need to add: > > [kdc] > enable-digest = true > digests_allowed = chap-md5,ms-chap-v2 Heimdal's supported digest types seems to be: ms-chap-v2, chap-md5, digest-md5, ntlm-v2, ntlm-v1-session, ntlm-v1 I've only configured and used ms-chap-v2, which probably should have been named "eap-mschap-v2" in the configuration, because that's what it is (and likewise "chap-md5" is eap-md5). (I haven't any experience in using the other digest types…)
smime.p7s
(application/pkcs7-signature, 1.9 KB) - not displayed