Ticket #489 (closed task: duplicate)
Follow up with NIST on getting the KDC upgraded to play nice with stock krb5-1.8
Reported by: | jdreed | Owned by: | geofft |
---|---|---|---|
Priority: | low | Milestone: | The Distant Future |
Component: | -- | Keywords: | |
Cc: | Fixed in version: | ||
Upstream bug: |
Description
We can set allow_weak_crypto in the meantime (#488), but we should follow up on this in the general case.
Change History
Note: See
TracTickets for help on using
tickets.
I ran into Mark Silis yesterday; he said that upgrading the KDCs is really hard, but he'd look into whether the key type could be changed to a triple-DES mode which isn't considered "weak".