Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Bjorn_Jonsson
Explorer
Jump to solution

Better crypto for AD SSO?

Hi,

Is it possible to use a modern crypto when you configure Active Directory SSO?

From the drop-down list I can choose the following:

RC4-HMAC-NT

DES-CBC-MD5

DES-CBC-CRC

I'm using management version R80.10 and gateway version R77.30.

0 Kudos
1 Solution

Accepted Solutions
cstueckrath
Contributor
4 Replies
G_W_Albrecht
Legend
Legend

The Drop-Down list you cite is for the Kerberos Ticketing. Kerberos 4 only supports DES, Win200 only RC4 or DES. I know that the MIT implementation can use DES, 3DES, AES and RC4, but CP only has RC4 or DES. I would suggest to use Web form (HTML) based SSO instead.

CCSE CCTE CCSM SMB Specialist
cstueckrath
Contributor

sk111945

G_W_Albrecht
Legend
Legend

Wow, this will add two AES cyphers by a HF 😉

CCSE CCTE CCSM SMB Specialist
0 Kudos
Bjorn_Jonsson
Explorer

Thanks!

0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events