Auth problem while interop with win2k3
Tom Yu
tlyu at MIT.EDU
Fri Sep 24 09:30:15 EDT 2004
>>>>> "jaltman2" == Jeffrey Altman <jaltman2 at nyc.rr.com> writes:
jaltman2> It does not make much sense that the KDC is issuing
jaltman2> a ticket protected by 3DES when 3DES is not in the list
jaltman2> of supported enctypes provided in the AS_REQ.
The "tkt" enctype is that used by the service to decrypt the ticket.
It doesn't matter that the client doesn't understand it (though there
was a bug in our early client code -- krb5-1.0.x? -- that would cause
a client to reject a ticket whose enctype it didn't understand).
---Tom
More information about the Kerberos
mailing list