> On 3 Aug 2017, at 03:53, Stefan Paetow <[log in to unmask]> wrote:
>
> More information that I'm not sure whether it is useful or not:
>
> According to
> https://kb.symas.com/knowledge-base/symas-openldap/2-4-44-2/man3-Library-Fu
> nctions2-4-44-2/gssapi-Generic-Security-Service-Application-Program-Interfa
> ce-library2-4-44-2/ there is a problem in older versions of Heimdal that
> incorrectly implement DES3 MIC getting and verification. Could this have
> something to do with this, although given that my Centos 6 VM has no
> problem with the MIC, the build off that very same machine *does* have a
> problem once it hits the public service I run.
DES3 isn’t supported by the GSS EAP mechanism.
— Luke
|