Dear All,
It seems to me that the tag kdc_supported_enctypes is not used in the
file kdc.conf anymore:
root@ubuntu1404:~# aptitude show krb5-kdc | grep Version
Version: 1.12+dfsg-2ubuntu5.2
root@ubuntu1404:~# zcat /usr/share/man/man5/kdc.conf.5.gz | grep
supported_enctypes
.B \fBsupported_
Hello,
Most of us know about the practice of the _kerberos TXT records in DNS; this
can help to translate a servername to a REALM name, which is especially helpful
if we want to crossover to other realms. This is coded into MIT krb5, and I
bet many of our domains implement it.
A grep on my RF
On Fri, Oct 10, 2014 at 12:28 AM, Tom Yu wrote:
> Natxo Asenjo writes:
>
>> When implementing rsyslog with gssapi
>> (http://www.rsyslog.com/doc/gssapi.html) I came accross the issue
>> that the rsyslog software expects the credentials cache of the host
>> principal in /tmp/krb5cc_0; the centos
hi,
problem solved. This was indeed a replay cache file. Using a true
ccache one solved the issue.
Thanks for your assistance.
--
groet,
natxo
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
On 10/13/2014 06:45 AM, Giuseppe Mazza wrote:
> It seems to me that the tag kdc_supported_enctypes is not used in the
> file kdc.conf anymore:
[...]
> I had that tag in the configuration of my old kerberos server, but I
> have not added it in the new one.
>From a look at our version history, the
I have a scenarios where IE sends a Kerberos request to the Datapower appliance
(where I have uploaded the keytab file to decryt the token) . if I use windows
XP as a Kerberos client everything works well I was able to see the Kerberos
token in Datapower. If I send the request from WINDOWS 7 I d