[Freeipa-users] KDC has no support for encryption type

[Dmitri Pal]

On 12/30/2014 06:06 AM, Matt . wrote:
> Readin up on this the weak password setting should work, but it doesn't.
>
> What are my chances here as I need to do a "ipa pwpolicy-mod --maxlife 200"

This touches the expiration not the encryption types.
>
> Or can this be done from a ldap browser too ?

Yes. It sets the global kerberos password expiration attribute.

>
> 2014-12-29 23:31 GMT+01:00 Matt . <yamakasi.014 at gmail.com>:
>> OK, thank for that.
>>
>> But should an IPA install not add them by default ? Maybe this is some
>> 4.x dev which is still needed ?
>>
>> I need to look what I exactly need.


-- 
Thank you,
Dmitri Pal

Sr. Engineering Manager IdM portfolio
Red Hat, Inc.