<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body>
<p dir="ltr">Martin,</p>
<p dir="ltr">Application compatible issue, AES256 is not been supported. </p>
<p dir="ltr">Thanks,<br>
Eldo</p>
<div class="quote">On 21/07/2014 7:15 pm, Martin Kosek <mkosek@redhat.com> wrote:<br type="attribution">
</div>
<div class="BodyFragment">
<div class="PlainText">On 07/21/2014 03:38 PM, Eldo Joseph wrote:<br>
> Is it possible to disable AES256 Encryption from IPA, while making Kerberos principals...<br>
> <br>
> -Eldo-<br>
<br>
I think you would need to hand update krbDefaultEncSaltTypes in<br>
cn=YOUR-REALM,cn=kerberos,SUFFIX (via ldapmodify) to make this working.<br>
<br>
Can you share what is the motivation for this change? I see requests to rather<br>
add additional (older) encryption types, not removing the current ones.<br>
<br>
Thanks,<br>
Martin<br>
</div>
</div>
</body>
</html>