[OpenAFS] Afs and arcfour

David Botsch dwb7@ccmr.cornell.edu
Thu, 24 Jun 2004 12:58:45 -0400


Right. However, in the case of kerb4 auth, it seems the krb5 server is 
returning the des-cbc-md5 instead of des-cbc-crc.

On 2004.06.24 12:45 Jeffrey Altman wrote:
> The OpenAFS client on windows will try to decrypt the ticket with 
> both the
> AFS String to Key function as well as the traditional Kerberos IV DES 
> String to Key
> function.
> 
> Jeffrey Altman
> 
> David Botsch wrote:
> 
>> So, it must be a bug in the kerberos server, then.
>> 
>> Having types in order:
>> des-cbc-md5:normal
>> des-cbc-crc:afs3
>> 
>> windows afs client gives: password incorrect (62)
>> 
>> On 2004.06.24 12:26 Jeffrey Altman wrote:
>> 
>>> David Botsch wrote:
>>> 
>>>> Not installed. Running 1.2.8a or 1.3.63/64
>>>> 
>>> then you are using Kerberos 4 and you only have DES-CBC-CRC
>>> 
>>> 
>> 

-- 
********************************
David William Botsch
Consultant/Advisor II
CCMR Computing Facility
dwb7@ccmr.cornell.edu
********************************