[OpenAFS] Problem getting AFS tokens on debian...

[Jan Pospisil]

On Mon, 18 Jan 2010, at 12:53 -0800, Russ Allbery wrote:

>> Adding the line
>> allow_weak_enctypes = yes
>> to the [libdefaults] section (is this the right syntax/place?)
>> unfortunately does not help.
>
> Because it's "allow_weak_crypto", not "allow_weak_enctypes".  Otherwise,
> yes, that's the problem and that should fix it.

Thank you very much, this really helped.

By the way, what are the best practices to avoid "weak crypto"? Do you (not only 
in Stanford) have all the krb5/afs keys in DES3, AES, ...?

Jan

--
Jan Pospisil, Ph.D.           e-mail: honik@kma.zcu.cz
University of West Bohemia    phone:  (+420) 37763-2675
Department of Mathematics     fax:    (+420) 37763-2602
Plzen, Czech Republic         address: Univerzitni 22, 306 14