cancel
Showing results for 
Search instead for 
Did you mean: 
Post a Question

Better crypto for AD SSO?

Jump to solution

Hi,

Is it possible to use a modern crypto when you configure Active Directory SSO?

From the drop-down list I can choose the following:

RC4-HMAC-NT

DES-CBC-MD5

DES-CBC-CRC

I'm using management version R80.10 and gateway version R77.30.

0 Kudos
1 Solution

Accepted Solutions

Re: Better crypto for AD SSO?

Jump to solution

sk111945

4 Replies

Re: Better crypto for AD SSO?

Jump to solution

The Drop-Down list you cite is for the Kerberos Ticketing. Kerberos 4 only supports DES, Win200 only RC4 or DES. I know that the MIT implementation can use DES, 3DES, AES and RC4, but CP only has RC4 or DES. I would suggest to use Web form (HTML) based SSO instead.

Re: Better crypto for AD SSO?

Jump to solution

sk111945

Re: Better crypto for AD SSO?

Jump to solution

Wow, this will add two AES cyphers by a HF 😉

0 Kudos

Re: Better crypto for AD SSO?

Jump to solution

Thanks!

0 Kudos