service principals in AD fro unix kerberos clients

[Jeffrey Altman]

What are the service principal and session key keytypes for the
host/unixhost.domain at DOMAIN ticket?

If they are not  DES-CBC-CRC  then you will not be able to
negotiate DES encryption in Telnet protocol.



Ryan Odgers wrote:
> I get the following error when trying to connect with kermit telnet:
> key size is not compatible with encryption type
> 
> I have set the UNIX kerberos client to use DES-CBC-CRC encryption.
> If I look in the Leash ticket manger, after trying to connect to from kermit
> to the UNIX host, I have the krbtgt ticket from the AD, as well as the
> host/unixhost.domain at DOMAIN ticket.
> Version of kerberos on UNIX is HP's version of Kerberos which comes with
> 11.11