>>>>> Markus Moeller <huaraz@xxxxxxxxxxxxxxxx> writes:
> Hi Ludovit,
> Which Kerberos library version do you use ? Is it possible that
> the encryption types don't match ? I saw in your first email the
> following:
It is standard Heimdal library on FreeBSD:
# kinit --version
kinit (Heimdal 1.5.2)
Copyright 1995-2011 Kungliga Tekniska Högskolan
Send bug-reports to heimdal-bugs@xxxxxxx
FreeBSD 10.1-STABLE #1 r275861
> Your klist shows a HTTP ticket for arcfour
> Server: HTTP/squid1.mdpt.local@MDPT.LOCAL
> Client: HTTP/squid1.mdpt.local@MDPT.LOCAL
> Ticket etype: arcfour-hmac-md5, kvno 8
> Ticket length: 1090
> Auth time: Feb 9 14:55:18 2015
> Start time: Feb 9 14:55:20 2015
> End time: Feb 10 00:55:18 2015
> Ticket flags: enc-pa-rep, pre-authent
> Addresses: addressless
> but the keytab has aes128.
> # ktutil -k /etc/krb5.keytab list
> /etc/krb5.keytab:
> Vno Type Principal Aliases
> 8 aes128-cts-hmac-sha1-96 HTTP/squid1.mdpt.local@MDPT.LOCAL
You are right... I tried to find out how to change it. Is it option on
KDC server? I am not able to find anything relevant.
lk
_______________________________________________
squid-users mailing list
squid-users@xxxxxxxxxxxxxxxxxxxxx
http://lists.squid-cache.org/listinfo/squid-users
