Re: GSSAPI auth issue with windows 7 client, postgresql 9.2.3 linux server

El mar, 14-01-2014 a las 08:19 -0500, Stephen Frost escribió:
> * jaime soler (jaime(dot)soler(at)gmail(dot)com) wrote:
> > psql: SSPI continuation error: The encryption type requested is not
> > supported by the KDC. (80090342)
>
> [...]
>
> > ktpass -out postgres.keytab -princ
> > postgres/hostname(at)domain -mapUser postgres -pass
> > XXX -crypto DES-CBC-MD5
>
> Not 100% sure this is it, but it looks like you're using an ancient
> encryption algo which is no longer supported by MIT Kerberos (very
> intentionally...). Why aren't you using AES256 instead?

So, should I use ALL as argument to -crypto option as it follows ?

ktpass -out postgres.keytab -princ
postgres/hostname(at)domain -mapUser postgres -pass
XXX -crypto ALL

Thanks,
Jaime

>
> Thanks,
>
> Stephen