From df46ba5c5c502b968b148f369616275846ddfb14 Mon Sep 17 00:00:00 2001 From: Anders Kaseorg Date: Tue, 27 Nov 2012 01:03:00 -0500 Subject: [PATCH] =?utf8?q?Let=E2=80=99s=20keep=20in=203DES=20for=20now,=20?= =?utf8?q?in=20case=20the=20KDC=20is=20rolled=20back?= MIME-Version: 1.0 Content-Type: text/plain; charset=utf8 Content-Transfer-Encoding: 8bit --- doc/root-instance.mdwn | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/doc/root-instance.mdwn b/doc/root-instance.mdwn index 301eaf5..e4efed5 100644 --- a/doc/root-instance.mdwn +++ b/doc/root-instance.mdwn @@ -113,7 +113,7 @@ be sure to ask for a pts id, if you want to use your tickets with AFS. You should change your root instance’s password with a command like this, to upgrade your key from critically weak DES encryption algorithm to strong AES encryption: - kadmin -p andersk/root -q 'cpw -e aes256-cts:normal -e aes128-cts:normal andersk/root' + kadmin -p andersk/root -q 'cpw -e aes256-cts:normal -e aes128-cts:normal -e des3-cbc-sha1:normal andersk/root' (Note: This might make your password incompatible with a [handful of services](http://debathena.mit.edu/trac/ticket/529) that you should not have been using with your root instance in the first place.) You can confirm the change with -- 2.44.0