permitted_enctypes = "des-cbc-crc" triggers 'kinit: Generic error (see e-text) while getting initial credentials'

[Wendy Lin]

I have this in my Suse 11.3 /etc/krb.conf for libdefaults:

        allow_weak_crypto = true
#       permitted_enctypes = "des-cbc-crc arcfour-hmac des3-cbc-sha1
aes128-cts-hmac-sha1-96 aes256-cts-hmac-sha1-96"
        permitted_enctypes = "des-cbc-crc"

Now if I try to kinit I get this error:

kinit
kinit: Generic error (see e-text) while getting initial credentials

Why?

Wendy