Ticket enctype question

Sam Hartman hartmans at MIT.EDU
Thu Aug 31 14:57:35 EDT 2006

>>>>> "Ben" == Ben Poliakoff <benp at reed.edu> writes:

    Ben> An interesting interoperability wrinkle arises if you have
    Ben> any Windows 2K/XP machines with native kerberos libraries
    Ben> (not KfW) pointed at your MIT KDC for authentication.  In my
    Ben> experiments a few months ago, such machines *fail* to get
    Ben> tickets if the first enctype listed in the KDC's
    Ben> 'supported_enctypes' is not 'des-cbc-crc:normal'.

That has not been MIT's experience doing interoperability testing with

More information about the Kerberos mailing list