krb1.2.3 on win2k using win2k active directory

[Danilo Almeida]

> That fixed it. You do indeed have to set the "Use DES encryption
> types for this account" option.

The funny thing is that the "Use DES encryption types for this account"
setting is apparently not needed when you have a cross-realm to an MIT
realm.  (i.e., I can still kinit to an account that's only in AD and get
a des-cbc-crc TGT.)

- Danilo