CANT_FIND_CLIENT_KEY

[Russ Allbery]

Matt Zagrabelny <mzagrabe at d.umn.edu> writes:

> Through some trial-and-error I am currently getting the following error
> in the kdc.log:

> AS_REQ (1 etypes {1}) 10.25.1.14: CANT_FIND_CLIENT_KEY:
> mzagrabe at D.UMN.EDU for krbtgt/D.UMN.EDU at D.UMN.EDU, KDC has no support
> for encryption type

> I assume the encryption type is (1) des-cbc-crc.

> How do I make the KDC have support for the encryption type? It looks
> like I already have it:

Add:

[libdefaults]
    allow_weak_crypto = true

-- 
Russ Allbery (rra at stanford.edu)             <http://www.eyrie.org/~eagle/>