CANT_FIND_CLIENT_KEY

Russ Allbery rra at stanford.edu
Tue Mar 30 20:18:11 EDT 2010


Matt Zagrabelny <mzagrabe at d.umn.edu> writes:

> it looks like the mzagrabe principle is missing the:

> Key: vno 1, DES cbc mode with CRC-32, no salt

> How would I add that key to the principle?

Change the password with an enctype setting that allows DES, basically.
If you have something like:

supported_enctypes = des3-cbc-sha1:normal des-cbc-crc:normal aes256-cts:normal

or whatever list you want in your kdc.conf file and you restart kadmind,
that should do it.

-- 
Russ Allbery (rra at stanford.edu)             <http://www.eyrie.org/~eagle/>



More information about the Kerberos mailing list