[OpenAFS] Afs and arcfour

David Botsch dwb7@ccmr.cornell.edu
Thu, 24 Jun 2004 11:50:03 -0400


What salt types does openafs 1.3.64 support w.r.t des-cbc-md5 (and is 
that a kerb4 support or a kerb5 support or both)?

On 2004.06.24 09:19 Jeffrey Altman wrote:
> OpenAFS 1.2.11 only supports DES-CBC-CBC.  It does not support 
> DES-CBC-MD5
> nor does it support RC4-HMAC.  OpenAFS 1.3.64 supports DES-CBC-MD5 
> which is
> Windows 2003 Server's preferred DES enctype.
> 
> An updated KTPASS will be shipped with Win2003 SP1 to allow the 
> exporting of RC4
> keytabs.
> 
> Jeffrey Altman
> 
> 
> 
> Davis, Adam wrote:
> 
>> Hi,
>> 
>> I have a Windows 2000 KDC (AD) which works fine with openafs as it 
>> uses
>> 
>>          DES cbc mode with CRC-32, DES cbc mode with CRC-32
>> 
>> We have a few Windows 2003 KDCs now and they use 		 
>> arcfour-hmac-md5
>> 
>> 
>> Can I get openafs 1.2.11 to work with this ??? I don't think the 
>> Windows
>> 2003 server can export an arcfour keytab I looked at the ktpass 
>> options and it does not have it as an option.
>> 
>> Any ideas ? Thanks Adam...
>> _______________________________________________
>> OpenAFS-info mailing list
>> OpenAFS-info@openafs.org
>> https://lists.openafs.org/mailman/listinfo/openafs-info
>> 

-- 
********************************
David William Botsch
Consultant/Advisor II
CCMR Computing Facility
dwb7@ccmr.cornell.edu
********************************