Auth problem while interop with win2k3

Tom Yu tlyu at MIT.EDU
Fri Sep 24 09:30:15 EDT 2004

>>>>> "jaltman2" == Jeffrey Altman <jaltman2 at> writes:

jaltman2> It does not make much sense that the KDC is issuing
jaltman2> a ticket protected by 3DES when 3DES is not in the list
jaltman2> of supported enctypes provided in the AS_REQ.

The "tkt" enctype is that used by the service to decrypt the ticket.
It doesn't matter that the client doesn't understand it (though there
was a bug in our early client code -- krb5-1.0.x? -- that would cause
a client to reject a ticket whose enctype it didn't understand).


More information about the Kerberos mailing list