From 7ae3a7486f0b235b1b6d9769e38ae3643173765b Mon Sep 17 00:00:00 2001 From: epackorigan Date: Wed, 22 Mar 2017 16:23:59 -0700 Subject: correcting msktutil usage to support more enctypes with multiple enctypes specified, only the last one will actually take effect. If you wish to provide support for more then one, you need to add the values (0x04 + 0x08 + 0x10 = 0x1C). replacing the 3 lines with one line to enable all three. Note that the keytabs generated will have 3 line for each principal (one for each enctypes). See msktutil man page for further details on enctypes. --- perl/lib/Wallet/Kadmin/AD.pm | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) diff --git a/perl/lib/Wallet/Kadmin/AD.pm b/perl/lib/Wallet/Kadmin/AD.pm index 571ea7d..ec60af9 100644 --- a/perl/lib/Wallet/Kadmin/AD.pm +++ b/perl/lib/Wallet/Kadmin/AD.pm @@ -184,9 +184,7 @@ sub ad_create_update { } my @cmd = ('--' . $action); push @cmd, '--server', $Wallet::Config::AD_SERVER; - push @cmd, '--enctypes', '0x4'; - push @cmd, '--enctypes', '0x8'; - push @cmd, '--enctypes', '0x10'; + push @cmd, '--enctypes', '0x1C'; push @cmd, '--keytab', $keytab; push @cmd, '--realm', $Wallet::Config::KEYTAB_REALM; -- cgit v1.2.3