Re: GSS Authentication

Yeah, the interesting thing is we're supposed to move to AES, but on the
current AD it isn't available :) Will be a bit ironic if it is all down to
using DES!

On Wed, Jun 16, 2010 at 11:05 AM, Stephen Frost <sfrost(at)snowman(dot)net> wrote:

> Greig,
>
> * greigwise(at)comcast(dot)net (greigwise(at)comcast(dot)net) wrote:
> > I finally got it working. Problem was that on the windows side on the
> service account within the account options, we needed to check "Use DES
> encryption types for this account". I had that changed on the AD side and
> that fixed the whole problem.
>
> Great, glad to hear you got it working. Just to reiterate- you really
> should be looking at using a 2008 AD with AES encryption types instead
> of DES. DES is depreciated and no longer secure given today's
> computers.
>
> Thanks,
>
> Stephen
>
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.9 (GNU/Linux)
>
> iEYEARECAAYFAkwY6CwACgkQrzgMPqB3kig89wCfWlskljcakITdMRFGlW55BM0B
> qrMAn0M0sHJh5UrEVSqTO3saRGuYLPQC
> =KWMB
> -----END PGP SIGNATURE-----
>
>