oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity

drop text about enctypes.

Browse Source 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20834 ec53bebd-3082-4978-b11e-865c3cabbd6b
This commit is contained in:
Love Hörnquist Åstrand
2007-06-03 07:25:41 +00:00
parent d3a1623477
commit 8683376309
1 changed files with 2 additions and 13 deletions
Download Patch File Download Diff File Expand all files Collapse all files

15
doc/win2k.texi
View File

@@ -127,17 +127,8 @@ Management tool, you do it like this:
netdom trust NT.REALM.EXAMPLE.COM /Domain:EXAMPLE.COM /add /realm /passwordt:TrustPassword netdom trust NT.REALM.EXAMPLE.COM /Domain:EXAMPLE.COM /add /realm /passwordt:TrustPassword
@end example @end example
You also need to add the inter-realm keys to the Heimdal KDC. There are You also need to add the inter-realm keys to the Heimdal KDC. Make sure
some tweaks that you need to do to @file{krb5.conf} beforehand. you have matching encryption types (DES, Arcfour and AES in case of Longhorn)
@example
[libdefaults]
default_etypes = des-cbc-crc
default_etypes_des = des-cbc-crc
@end example
since otherwise checksum types that are not understood by Windows 2000
will be generated (@pxref{Quirks of Windows 2000 KDC}).
Another issue is salting. Since Windows 2000 does not seem to Another issue is salting. Since Windows 2000 does not seem to
understand Kerberos 4 salted hashes you might need to turn off anything understand Kerberos 4 salted hashes you might need to turn off anything
@@ -161,8 +152,6 @@ What you probably want to use is this:
@c XXX check this @c XXX check this
@c It is definitely not supported in base 2003. I haven't been able to @c It is definitely not supported in base 2003. I haven't been able to
@c get SP1 installed here, but it is supposed to work in that. @c get SP1 installed here, but it is supposed to work in that.
Note that before Windows 2003 SP1, arcfour-hmac-md5 wasn't supported
between Windows realms and Non Windows realms.
Once that is also done, you can add the required inter-realm keys: Once that is also done, you can add the required inter-realm keys: