[OpenAFS] Re: klog.krb5 incompatible with Heimdal 1.5.1?

Andreas Haupt ahaupt@ifh.de
Thu, 13 Oct 2011 10:18:59 +0200


Hi Jeffrey,

On Wed, 2011-10-12 at 14:07 -0400, Jeffrey Altman wrote:
> On 10/12/2011 1:47 PM, Stephan Wiesand wrote:
> > It works fine with a 1.2.1 KDC. It's broken with a 1.5.1 one.
> Does your Heimdal 1.5.1 KDC permit the use of weak crypto?

Yes, it does: "allow_weak_crypto = true" is set in [libdefaults] in
krb5.conf on the server as well as on the client.

Thanks,
Andreas
-- 
| Andreas Haupt             | E-Mail: andreas.haupt@desy.de
|  DESY Zeuthen             | WWW:    http://www-zeuthen.desy.de/~ahaupt
|  Platanenallee 6          | Phone:  +49/33762/7-7359
|  D-15738 Zeuthen          | Fax:    +49/33762/7-7216