kadmin and enctype
Victor Sudakov <[email protected]> Wed, 11 Oct 2017 17:47:58 +0700
| Newsgroups | gmane.comp.encryption.kerberos.heimdal.general |
|---|---|
| Organization | AO "Svyaztransneft", SibPTUS |
| Message-ID | <[email protected]> |
Dear Colleagues, "kadmin -l" by default creates principals with the following Keytypes: aes256-cts-hmac-sha1-96(pw-salt), des3-cbc-sha1(pw-salt), arcfour-hmac-md5(pw-salt). How do I create a principal with the weak des-cbc-crc keytype? The "add" command does not seem to support the specification of encryption types. There is an option "allow_weak_crypto = true" for krb5.conf, but I don't understand in which section it should be for "kadmin -l" to honour it. -- Victor Sudakov, VAS4-RIPE, VAS47-RIPN AS43859