From: Anders Kaseorg Date: Wed, 5 Dec 2012 12:12:17 +0000 (-0500) Subject: Revert "Let’s keep in 3DES for now, in case the KDC is rolled back" X-Git-Url: https://sipb.mit.edu/gitweb.cgi/wiki.git/commitdiff_plain/5f30024652946c1a9a5b23c0f6a8690f25004246?ds=sidebyside Revert "Let’s keep in 3DES for now, in case the KDC is rolled back" This reverts commit df46ba5c5c502b968b148f369616275846ddfb14. --- diff --git a/doc/root-instance.mdwn b/doc/root-instance.mdwn index e4efed5..301eaf5 100644 --- a/doc/root-instance.mdwn +++ b/doc/root-instance.mdwn @@ -113,7 +113,7 @@ be sure to ask for a pts id, if you want to use your tickets with AFS. You should change your root instance’s password with a command like this, to upgrade your key from critically weak DES encryption algorithm to strong AES encryption: - kadmin -p andersk/root -q 'cpw -e aes256-cts:normal -e aes128-cts:normal -e des3-cbc-sha1:normal andersk/root' + kadmin -p andersk/root -q 'cpw -e aes256-cts:normal -e aes128-cts:normal andersk/root' (Note: This might make your password incompatible with a [handful of services](http://debathena.mit.edu/trac/ticket/529) that you should not have been using with your root instance in the first place.) You can confirm the change with