[OpenAFS] KRB5 Imported KA Keys and Win2K

Derrick J Brashear shadow@dementia.org
Wed, 2 May 2001 00:55:47 -0400 (EDT)

On Tue, 1 May 2001, Charles Clancy wrote:

> From the "ISSUES" file in the Kerberos 5 migration kit, it says that
> Kerberos 5 supports the following key types:
>   des-cbc-crc:normal
>   des-cbc-crc:v4
>   des-cbc-crc:afs3
> When you use the migration tools to migrate accounts from the kaserver to
> Kerberos, they are stored as type "des-cbc-crc:afs3".
> Now, according to Microsoft's Win2K documentation, they support:
> Does that mean they support all variations of des-cbc-crc?  

Nope, you need the v5 salted variant, so you'll need to set up for that
and make all your users change their passwords