problem with pam_krb5 4.2-1

[Russ Allbery]

Rohit Kumar Mehta <rohitm at engr.uconn.edu> writes:

> I think the best (and most secure) practice would be to regenerate all
> the keytabs and the trust, so I'll tackle it next week.

Okay, yes, that's true.  :)

I suspect that the problem is that the intermediate KDC is rejecting the
cross-realm authentication because the cross-realm ticket is DES.

-- 
Russ Allbery (rra at stanford.edu)             <http://www.eyrie.org/~eagle/>