On Wed, Aug 22, 2018 at 06:04:33PM +0200, Kacper wrote:
> klist -Kek /etc/postfix/postfix.keytab
> Keytab name: FILE:/etc/postfix/postfix.keytab
> KVNO Principal
> ----
> --------------------------------------------------------------------------
> 2 smtp/srv.mydomain.t...@mydomain.test (arcfour-hmac)
> (0x51f860d755da544604c21b686c70fdb2)
> 2 smtp/srv.mydomain.t...@mydomain.test (des-cbc-md5) (0x32f8f1ad3140859b)
> 2 smtp/srv.mydomain.t...@mydomain.test (des-cbc-crc) (0x32f8f1ad3140859b)
I would really start with a keytab that got non-deprecated ciphers. I
doubt that anything from the last ten years will work with the des ones
and not many with the arcfour one. So there needs to be at least one
aes one.
Bastian
--
The heart is not a logical organ.
-- Dr. Janet Wallace, "The Deadly Years", stardate 3479.4
