GravityZone Kerberos proxy integration with DES type encryption does not work
Bitdefender GravityZone provides full visibility into organizations’ overall security posture, global security threats, and control over its security services that protect virtual or physical desktops, servers and mobile devices. All Bitdefender’s Enterprise Security solutions are managed within the GravityZone through a single console, Control Center, that provides control, reporting, and alerting services for various roles within the organization.
Integrating GravityZone with a Kerberos proxy server
Bitdefender GravityZone offers integration with proxy servers via Control Center from the root account.
However, the integration with a Kerberos proxy server with the option Use Kerberos DES type encryption enabled does not work.
When a domain user with the Use Kerberos DES encryption type for this account option enabled is used to integrate Bitdefender GravityZone with a Kerberos proxy server, the following error will be displayed:
[email protected]:/home/bdadmin# cat /tmp/kinit.log
spawn sh -c /usr/bin/kinit -p [email protected]
kinit: KDC has no support for encryption type while getting initial credentials
send: spawn id exp5 not open
"send -- "xxxxxxxx\r""
(file "/opt/bitdefender/var/tmp/kinit-0NdG3m" line 7)
This is a known issue of Bitdefender GravityZone and will be fixed in a future update.