[OpenAFS] Problem getting AFS tokens on debian...
Tue, 19 Jan 2010 07:35:25 +0100 (CET)
On Mon, 18 Jan 2010, at 12:53 -0800, Russ Allbery wrote:
>> Adding the line
>> allow_weak_enctypes = yes
>> to the [libdefaults] section (is this the right syntax/place?)
>> unfortunately does not help.
> Because it's "allow_weak_crypto", not "allow_weak_enctypes". Otherwise,
> yes, that's the problem and that should fix it.
Thank you very much, this really helped.
By the way, what are the best practices to avoid "weak crypto"? Do you (not only
in Stanford) have all the krb5/afs keys in DES3, AES, ...?
Jan Pospisil, Ph.D. e-mail: email@example.com
University of West Bohemia phone: (+420) 37763-2675
Department of Mathematics fax: (+420) 37763-2602
Plzen, Czech Republic address: Univerzitni 22, 306 14