Bug 1015128

Summary: telnet with kerberos work only with des-cbc-crc
Product: Red Hat Enterprise Linux 7 Reporter: Patrik Kis <pkis>
Component: krb5-applAssignee: Nalin Dahyabhai <nalin>
Status: CLOSED WONTFIX QA Contact: BaseOS QE Security Team <qe-baseos-security>
Severity: low Docs Contact:
Priority: low    
Version: 7.0CC: dpal, jplans
Target Milestone: rc   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: 950689 Environment:
Last Closed: 2013-10-18 21:18:29 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Bug Depends On: 950689    
Bug Blocks:    

Comment 1 Patrik Kis 2013-10-03 14:59:37 UTC
This actually an issue of krb5-appl:
krb5-appl-1.0.3-7.el7

Comment 2 Nalin Dahyabhai 2013-10-18 21:04:06 UTC
The only ciphers that are implemented in libk5crypto and which are also specified for use in telnet are DES and triple-DES.  We could probably use the DES3 support as a building block to add support for DES3_OFB64 and DES3_CFB64 but if you'll ever need anything stronger, you'll probably have to use SSH.