Displaying 5 results from an estimated 5 matches for "bluescreen08".
Did you mean:
bluescreen
2017 Nov 10
2
Slow Kerberos Authentication
...family: arcfour-hmac
camellia
The Camellia family: camellia256-cts-cmac and camellia128-cts-cmac
try the lines i send before keep the allow weak encptions.
try these, and add them at the beginning.
arcfour-hmac
Greetz,
Louis
________________________________
Van: Paul [mailto:bluescreen08 at gmail.com]
Verzonden: vrijdag 10 november 2017 12:03
Aan: L.P.H. van Belle
CC: samba at lists.samba.org
Onderwerp: Re: [Samba] Slow Kerberos Authentication
I'll look into it and update if I find anything out :)
Any idea why it would try enc type 17, then 18, then pause for 30 sec...
2017 Nov 09
3
Slow Kerberos Authentication
Hai,
You may need to add the the following in krb5.conf
[libdefaults]
allow_weak_crypto = true
; for Windows 2003
; default_tgs_enctypes = rc4-hmac des-cbc-crc des-cbc-md5
; default_tkt_enctypes = rc4-hmac des-cbc-crc des-cbc-md5
; permitted_enctypes = rc4-hmac des-cbc-crc des-cbc-md5
; for Windows 2008 with AES
default_tgs_enctypes = aes128-cts-hmac-sha1-96
2017 Nov 11
0
Slow Kerberos Authentication
...128-cts-cmac
>
>
> try the lines i send before keep the allow weak encptions.
> try these, and add them at the beginning.
> arcfour-hmac
>
>
>
> Greetz,
>
> Louis
>
>
>
>
>
>
> ________________________________
>
> Van: Paul [mailto:bluescreen08 at gmail.com]
> Verzonden: vrijdag 10 november 2017 12:03
> Aan: L.P.H. van Belle
> CC: samba at lists.samba.org
> Onderwerp: Re: [Samba] Slow Kerberos Authentication
>
>
> I'll look into it and update if I find anything out :)
>...
2017 Nov 10
0
Slow Kerberos Authentication
...ows encryption in krb5.conf as standard, but imo, that are changes which might give other problems.
And is not my best advice..
So best advice is .. upgrade to samba 4, and packages are available.
https://linux.oracle.com/errata/ELSA-2017-1271.html
Greetz,
Louis
Van: Paul [mailto:bluescreen08 at gmail.com]
Verzonden: vrijdag 10 november 2017 9:57
Aan: L.P.H. van Belle
Onderwerp: Re: [Samba] Slow Kerberos Authentication
Thanks, however that didn't work even after a reboot, still the same error.
On 9 Nov 2017 16:05, "L.P.H. van Belle via samba" <samba at lists.samba....
2017 Nov 09
0
Slow Kerberos Authentication
Hi All,
I've a problem with samba 3.6.23 on Oracle Linux 6, Kerberos authentication
is working but it takes around 30 seconds on first access. This is an
active directory domain with 2008r2 DC's.
I've tracked it down to what looks like the incorrect encryption type being
used according to the debug output below, as you can see it fails twice
with enc type of 17 and 18 but succeeds