[SOLVED] kadmin: No supported encryption types

btnadiga · 10-04-2011, 11:12 AM

I'm trying to setup kerberos on Ubuntu.

1) I changed krb5.conf. Do I need to restart anything? I do not see any krb5 related stuff in /etc/init.d

2) kadmin -p username produces the following error:
kadmin: No supported encryption types (config file error?) while initializing kadmin interface

Relevant lines from krb5.conf are:

[libdefaults]
default_tgs_enctypes = des-cbc-crc
default_tkt_enctypes = des-cbc-crc

Your help would be appreciated.
Thanks,
Balu

AuroraZero · 10-05-2011, 09:02 PM

Check to see if you have the relevant encryption installed. I am no Ubuntu expert but the locate command should help there. Try locate crc and see if it is installed and if so where. You need to adjust that part of the config file to point to where the files are located or it shall never find them on it's own.

btnadiga · 10-06-2011, 11:43 AM

Further Googling solved the problem. Related to some encryption schemes being depracated.

Solution: Add allow_weak_crypto = true in [libdefaults] section of krb5.conf

AuroraZero · 10-06-2011, 12:44 PM

Cool glad you got it fixed