Running with RC4 only: (gdb) set args host (gdb) run Starting program: /afs/anl.gov/appl/krb5-dev/sun4x_510/krb5m/sbin/gss-server host [Thread debugging using libthread_db enabled] [New Thread 1 (LWP 1)] krb5_pac_parse:398 cbuffers=5 version=0 krb5_pac_parse:409 i=0 ulType=1 cbBufferSize=1024 Offset=0 krb5_pac_parse:409 i=1 ulType=10 cbBufferSize=22 Offset=0 krb5_pac_parse:409 i=2 ulType=12 cbBufferSize=64 Offset=0 krb5_pac_parse:409 i=3 ulType=6 cbBufferSize=20 Offset=0 krb5_pac_parse:409 i=4 ulType=7 cbBufferSize=20 Offset=0 k5_pac_zero_signature:557 type=6 -138 16 k5_pac_zero_signature:557 type=7 -138 16 mspac_verify:1105 First verify code=0 context flag: GSS_C_MUTUAL_FLAG context flag: GSS_C_REPLAY_FLAG context flag: GSS_C_CONF_FLAG context flag: GSS_C_INTEG_FLAG Accepted connection: "b17783@ANL.GOV" Received message: "XXXX" NOOP token rnning with AES256 as set in msDS-Supported_encryptionTypes = 16 but checksup is still sent as -138 the RC4 version. krb5_pac_parse:398 cbuffers=5 version=0 krb5_pac_parse:409 i=0 ulType=1 cbBufferSize=1024 Offset=0 krb5_pac_parse:409 i=1 ulType=10 cbBufferSize=22 Offset=0 krb5_pac_parse:409 i=2 ulType=12 cbBufferSize=64 Offset=0 krb5_pac_parse:409 i=3 ulType=6 cbBufferSize=20 Offset=0 krb5_pac_parse:409 i=4 ulType=7 cbBufferSize=20 Offset=0 k5_pac_zero_signature:557 type=6 -138 16 k5_pac_zero_signature:557 type=7 -138 16 mspac_verify:1105 First verify code=-1765328196 k5_pac_zero_signature:557 type=6 -138 16 k5_pac_zero_signature:557 type=7 -138 16 mspac_verify:1128 retry verify code2=-1765328353 enctype=23 pac->verified=0 Note: found the RC4 key in key file, but verify fails KRB5KRB_AP_ERR_BAD_INTEGRITY as the provided and computed checksum don't match. k5_pac_zero_signature:557 type=6 -138 16 k5_pac_zero_signature:557 type=7 -138 16 mspac_verify:1128 retry verify code2=-1765328196 enctype=17 pac->verified=0 k5_pac_zero_signature:557 type=6 -138 16 k5_pac_zero_signature:557 type=7 -138 16 mspac_verify:1128 retry verify code2=-1765328196 enctype=18 pac->verified=0 GSS-API error accepting context: Unspecified GSS failure. Minor code may provide more information GSS-API error accepting context: Bad encryption type