From 72534307e8498459ecdde948bf9cc77105103f61 Mon Sep 17 00:00:00 2001 From: Lizhou Sha Date: Tue, 15 Dec 2015 22:47:55 -0500 Subject: [PATCH] Should be 3DES --- doc/kerberized-server.mdwn | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/doc/kerberized-server.mdwn b/doc/kerberized-server.mdwn index 763f8ea..a87d552 100644 --- a/doc/kerberized-server.mdwn +++ b/doc/kerberized-server.mdwn @@ -15,7 +15,7 @@ and then **set a new (random) key**. # k5srvutil change # k5srvutil delold -Note that the `k5srvutil` command will also generate keys for the DES and RC4 ciphers, which are considered weak. +Note that the `k5srvutil` command will also generate keys for the 3DES and RC4 ciphers, which are considered weak. You are strongly advised to read the "Upgrading cryptographic strength" section below on how to generate only AES keys instead. If you're using Debathena, you can install the `debathena-ssh-server-config` package to configure Kerberos authentication on the server side. If not, make sure your `/etc/ssh/sshd_config` file includes the lines -- 2.44.0