[Bug 1222605] KDC has no support for encryption type
https://bugzilla.suse.com/show_bug.cgi?id=1222605 https://bugzilla.suse.com/show_bug.cgi?id=1222605#c2 Samuel Cabrero <scabrero@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |samba-maintainers@SuSE.de, | |SchwarzerA@messe-duesseldor | |f.de Flags| |needinfo?(SchwarzerA@messe- | |duesseldorf.de) --- Comment #2 from Samuel Cabrero <scabrero@suse.com> --- This is probably related to crypto-policies:
* jue feb 29 2024 Pedro Monreal <pmonreal@suse.com> - Add crypto-policies support [bsc#1211301] * Update krb5.conf in vendor-files.tar.bz2
$ ls -l /etc/krb5.conf.d/crypto-policies lrwxrwxrwx 1 root root 40 jul 1 09:51 /etc/krb5.conf.d/crypto-policies -> ../crypto-policies/back-ends/krb5.config $ cat /etc/krb5.conf.d/crypto-policies [libdefaults] permitted_enctypes = aes256-cts-hmac-sha384-192 aes128-cts-hmac-sha256-128 aes256-cts-hmac-sha1-96 aes128-cts-hmac-sha1-96 camellia256-cts-cmac camellia128-cts-cmac
The default value for permitted_enctypes includes "arcfour-hmac-md5". You might need to adjust your config. -- You are receiving this mail because: You are on the CC list for the bug.
participants (1)
-
bugzilla_noreply@suse.com