Tag Info

New answers tagged

0

The problem is twofold: Secure Transport uses the certificate chain exactly as provided to it by the API client. Both the API documentation and the source code comments imply (without being explicit) that this is a bug: in such circumstances, it appears that Secure Transport should attempt to build the certificate chain from the system keychain. Apple's ...


0

Try listing the password server's supported hash types with pwpolicy -n /LDAPv3/127.0.0.1 -getglobalhashtypes ...and see if it includes RECOVERABLE (which I believe is needed for both DIGEST-MD5 and WEBDAV-DIGEST) (note that this won't list GSSAPI/Kerberos, since this is handled by a separate service). Unfortunately I don't have a way to test this right ...


2

Surely Apple haven't compiled Kerberos without any support for DES? Well, actually, it looks like they did in 10.10/Yosemite. And after the mess they made of Kerberos in 10.07/Lion... you have my sincere condolences. The functionality that krb5-weak.conf tries to achieve won't be needed on OS X from Yosemite (10.10) on forwards, since Yosemite's ...



Top 50 recent answers are included