krb1.2.3 on win2k using win2k active directory

Danilo Almeida dalmeida at MIT.EDU
Tue Mar 19 11:01:03 EST 2002


> That fixed it. You do indeed have to set the "Use DES encryption
> types for this account" option.

The funny thing is that the "Use DES encryption types for this account"
setting is apparently not needed when you have a cross-realm to an MIT
realm.  (i.e., I can still kinit to an account that's only in AD and get
a des-cbc-crc TGT.)

- Danilo





More information about the Kerberos mailing list