[OpenAFS] Heimdal and openafs with Debian.

Derek Atkins warlord@MIT.EDU
19 Aug 2002 10:47:34 -0400


Love <lha@stacken.kth.se> writes:

> Derek Atkins <warlord@MIT.EDU> writes:
> 
> > Are you sure that you've only got a des-cbc-crc keytype?  AFS cannot
> > use anything else?
> > 
> > Other than that, you might try asking the Heimdal folks..
> 
> heimdal ktutil will convert the des-cbc-md5 when using
> 
>   ktutil copy FILE:keytab.afs AFSKEYFILE:KeyFile
> 
> Why would afs not be able to use any of the des-cbc-{cbc,md4,md5} ?

I'm surprised it even uses the -md5 key!  OTOH, as it is a random key
I suspect that each of the des-cbc-* keys are the same, since there is
no string-to-key for the "salt" to affect.

The real issue is the des3 key.

> Love

-derek

-- 
       Derek Atkins, SB '93 MIT EE, SM '95 MIT Media Laboratory
       Member, MIT Student Information Processing Board  (SIPB)
       URL: http://web.mit.edu/warlord/    PP-ASEL-IA     N1NWH
       warlord@MIT.EDU                        PGP key available