[Freeipa-users] scripting question

[Rob Crittenden]

Richard Betel wrote:
> I'm trying to debug a script that is supposed to auto-setup kerberos for
> Hadoop. Its not working, and I've boiled down the problem to the fact
> that for some reason, it wants to use DES as the encryption type. There
> is no good reason for this, since both freeIPA and Hadoop support modern
> encryptions, so I want to fix the script. Is there a way for a script to
> query IPA for the supported encryption types?  
> 

You can find it in cn=EXAMPLE.COM,cn=kerberos,dc=example,dc=com

$ ldapsearch -Y GSSAPI -s base -b
cn=EXAMPLE.COM,cn=kerberos,dc=example,dc=com krbDefaultEncSaltTypes

rob