Results 1 to 4 of 4

Thread: kinit in krb5-user (Ubuntu 10.04 beta2) not working

  1. #1
    Join Date
    Feb 2008
    Beans
    Hidden!
    Distro
    Ubuntu 10.04 Lucid Lynx

    kinit in krb5-user (Ubuntu 10.04 beta2) not working

    Hi,

    To use Kerberos, I installed the ssh-krb5 & krb5-user package in Ubuntu 10.04 beta 2, but when I call kinit, it gives the following error message:

    No supported encryption types (config file error?) while getting initial credentials

    Does anybody know what causes this error? I believe I have the correct /etc/krb5.conf and /etc/ssh/ssh_config (GSSAPIDelegateCredentials is set to 'yes'). Thank you


    Regards,

  2. #2
    Join Date
    Dec 2005
    Beans
    134

    Re: kinit in krb5-user (Ubuntu 10.04 beta2) not working

    I had this same problem. The reason for me was that my KDC requires des-cbc-crc encryption, which is apparently deprecated as of 10.04. After a Google search, I found:

    "Please also note, that des-cbc-crc encryption is depreciated and, starting with Ubuntu 10.04, is no longer supported by default in the Kerberos libraries. For nfs4 to work, you need to add allow_weak_crypto = true to /etc/krb5.conf"

    on this page.

    Adding allow_weak_crypto = true as suggested to my /etc/krb5.conf fixed it.

    Hope this helps.

  3. #3
    Join Date
    Feb 2008
    Beans
    Hidden!
    Distro
    Ubuntu 10.04 Lucid Lynx

    Re: kinit in krb5-user (Ubuntu 10.04 beta2) not working

    Hi,

    Thank you for the help! I can confirm that adding
    'allow_weak_crypto = true' (without quotes)
    under [libdefaults] section in /etc/krb5.conf works

    Regards,

  4. #4
    Join Date
    Apr 2009
    Beans
    44

    Re: kinit in krb5-user (Ubuntu 10.04 beta2) not working

    Thank you very much for the tip.
    I can confirm that adding this line, allow_weak_crypto = true, under libdefaults solved the problem.
    Thank you again,

    ~d0.higgs

Tags for this Thread

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •