Previous Topic: KRB Endpoints TabNext Topic: Known Issues


Encryption Type and Salt Pairs Dialog

Use this dialog to view and edit the encryption type and salt pairs.

The fields in this dialog are listed below:

Available List Box

Specifies the encryption types and salt pairs that are available.

Add Button

Adds the selected available pair into the Included List box.

Note: If you try to add two pairs of the same type, only one will be added.

Remove Button

Removes the selected pair from the Included List Box.

Included List Box

Specifies the encryption type and salt pairs that have been included. Once you have clicked OK, the pairs are kept in memory and committed to the KDC together with the password change of the principal.

If there are invalid entries, an error message is displayed. To correct the error, you must go back to the Customization Tab of the endpoint property sheet.

Note: The encryption type and salt pairs listed here are sorted per Java’s implementation of the natural ordering of strings. When two similar encsalts are passed to Kerberos, only the first one is used. For example, if both des-cbc-crc:normal and des-cbc-md5:normal are listed, only des-cbc-crc:normal is used because “c” has a lower value than “m”.