Unable to have KDC use different enctype for session/service key
Sam Hartman
hartmans at MIT.EDU
Tue Sep 17 13:36:00 EDT 2002
>>>>> "Ken" == Ken Hornstein <kenh at cmf.nrl.navy.mil> writes:
>> I suspect you will run into cases in 1.0.6 where clients or
>> servers will fail even if you have a single des session key
>> with a tripple des ticket.
Ken> Hm, I haven't run into any such cases yet. And we've been
Ken> doing this in production coming up on a week now, and so far
Ken> we have had no problems (at least, none I've gotten any
Ken> reports of, or seen in any the logs). That's with old
Ken> clients getting and using 3DES TGTs and single-DES session
Ken> keys. So I think that it does work okay (which surprises me,
Ken> but there you go). If you know of a situation where it
OK, I'll go actually look at the repository
and see when things were unbroken.
More information about the krbdev
mailing list