Ticket enctype question

[Sam Hartman]

>>>>> "Ben" == Ben Poliakoff <benp at reed.edu> writes:

    Ben> An interesting interoperability wrinkle arises if you have
    Ben> any Windows 2K/XP machines with native kerberos libraries
    Ben> (not KfW) pointed at your MIT KDC for authentication.  In my
    Ben> experiments a few months ago, such machines *fail* to get
    Ben> tickets if the first enctype listed in the KDC's
    Ben> 'supported_enctypes' is not 'des-cbc-crc:normal'.

That has not been MIT's experience doing interoperability testing with
Microsoft.