drop text about enctypes.

git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20834 ec53bebd-3082-4978-b11e-865c3cabbd6b
This commit is contained in:
Love Hörnquist Åstrand
2007-06-03 07:25:41 +00:00
parent d3a1623477
commit 8683376309

View File

@@ -127,17 +127,8 @@ Management tool, you do it like this:
netdom trust NT.REALM.EXAMPLE.COM /Domain:EXAMPLE.COM /add /realm /passwordt:TrustPassword
@end example
You also need to add the inter-realm keys to the Heimdal KDC. There are
some tweaks that you need to do to @file{krb5.conf} beforehand.
@example
[libdefaults]
default_etypes = des-cbc-crc
default_etypes_des = des-cbc-crc
@end example
since otherwise checksum types that are not understood by Windows 2000
will be generated (@pxref{Quirks of Windows 2000 KDC}).
You also need to add the inter-realm keys to the Heimdal KDC. Make sure
you have matching encryption types (DES, Arcfour and AES in case of Longhorn)
Another issue is salting. Since Windows 2000 does not seem to
understand Kerberos 4 salted hashes you might need to turn off anything
@@ -161,8 +152,6 @@ What you probably want to use is this:
@c XXX check this
@c It is definitely not supported in base 2003. I haven't been able to
@c get SP1 installed here, but it is supposed to work in that.
Note that before Windows 2003 SP1, arcfour-hmac-md5 wasn't supported
between Windows realms and Non Windows realms.
Once that is also done, you can add the required inter-realm keys: