Migrate from RC4 to AEC

[#1]

Hi,
We are in process of migrating from RC4 to AEC in Cloudera manager for Kerberos. Could you please help me to understand if there  is any issue while changing  from RC4 to AEC. Do I need to recreate the keytabs ? If yes canI force the accounts in Active directory to use AEC from RC4 ?

[#2]

Hi,

You may want to change the new encryption type in your "krb5.conf" file also you can set the

* Set "Active Directory Set Encryption Types " under > CM > Configuration

* You may also want to include the new encryption type per the documentation ( CM > Configuration > "Kerberos Encryption Types" )

> https://docs.cloudera.com/cdp-private-cloud-base/7.1.6/security-kerberos-authentication/topics/cm-se...

* Then you may want to Regenerate the credentials for all services to use the new encryption type  ( stop all services is required to perform this )