Avoid to use Java Cryptography Extension (JCE) in kerberos about buildoop

[jucaf]

In the default Kerberos installation, it's enabled the encryption type aes:256, which is restricted by US exportation laws, so it's necessary to change the file /var/kerberos/krb5kdc/kdc.conf and delete aes256-cts:normal from supported enc types. Then recreate the Kerberos DB.

# cat /var/kerberos/krb5kdc/kdc.conf [kdcdefaults] kdc_ports = 88 kdc_tcp_ports = 88 [realms] REALM = { acl_file = /var/kerberos/krb5kdc/kadm5.acl dict_file = /usr/share/dict/words admin_keytab = /var/kerberos/krb5kdc/kadm5.keytab supported_enctypes = aes128-cts:normal des3-hmac-sha1:normal arcfour-hmac:normal des-hmac-sha1:normal des-cbc-md5:normal des-cbc-crc:normal }