[OpenAFS] KRB5 Imported KA Keys and Win2K

[Derrick J Brashear]

On Tue, 1 May 2001, Charles Clancy wrote:

> From the "ISSUES" file in the Kerberos 5 migration kit, it says that
> Kerberos 5 supports the following key types:
>   des-cbc-crc:normal
>   des-cbc-crc:v4
>   des-cbc-crc:afs3
> 
> When you use the migration tools to migrate accounts from the kaserver to
> Kerberos, they are stored as type "des-cbc-crc:afs3".
> 
> Now, according to Microsoft's Win2K documentation, they support:
>   DES-CBC-MD5
>   DES-CBC-CRC
> 
> Does that mean they support all variations of des-cbc-crc?  

Nope, you need the v5 salted variant, so you'll need to set up for that
and make all your users change their passwords