Kerberos Mechanism - Supported MAX_SSF

Sorabh Hamirwasia via Cyrus-sasl <[email protected]>
Newsgroups gmane.comp.security.cyrus.sasl
Message-ID <BN6PR16MB1730A2D0B6C703A1173E1BB6DA450@BN6PR16MB1730.namprd16.prod.outlook.com> 
Hi,

It looks to me (from [1]) that we only support max_ssf of 56 (i.e. DES-56) with GSSAPI implementation of Kerberos in Cyrus SASL. Can someone please confirm on this ? I am looking for AES 256 bit encryption with Kerberos mechanism. If that's not supported is there any plan for supporting it ? Please advice.


[1]https://svn.apache.org/repos/asf/subversion/trunk/notes/sasl.txt


The realm in svnserve.conf is your Kerberos authentation realm, e.g. "EXAMPLE.COM". Cyrus's GSSAPI implementation does not support encryption, except for very basic 56-bit DES.  If you leave the encrypt settings out of your svnserve.conf entirely, you're fine; just don't set max-encryption higher than 56.


Thanks,

Sorabh
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.