Re: GSS Authentication

[Bryan Montgomery <monty@xxxxxxxxxxx>]

Yeah, the interesting thing is we're supposed to move to AES, but on the current AD it isn't available :) Will be a bit ironic if it is all down to using DES!

On Wed, Jun 16, 2010 at 11:05 AM, Stephen Frost <sfrost@xxxxxxxxxxx> wrote:

Greig,

* greigwise@xxxxxxxxxxx (greigwise@xxxxxxxxxxx) wrote:

> I finally got it working. Problem was that on the windows side on the service account within the account options, we needed to check "Use DES encryption types for this account". I had that changed on the AD side and that fixed the whole problem.

Great, glad to hear you got it working.  Just to reiterate- you really
should be looking at using a 2008 AD with AES encryption types instead
of DES.  DES is depreciated and no longer secure given today's
computers.

       Thanks,

               Stephen

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)

iEYEARECAAYFAkwY6CwACgkQrzgMPqB3kig89wCfWlskljcakITdMRFGlW55BM0B
qrMAn0M0sHJh5UrEVSqTO3saRGuYLPQC
=KWMB
-----END PGP SIGNATURE-----