Unable to have KDC use different enctype for session/service key

Ken Hornstein kenh at cmf.nrl.navy.mil
Tue Sep 17 12:13:00 EDT 2002


>Well, from the command line
>kinit foo
>kvno -e des-cbc-crc krbtgt/realm at realm

Hm.  Unfortunately, that doesn't seem to help me.  I just tried that, and
while it does get a TGT with a single DES encryption key, the old client
library doesn't use it; it picks the first one out of the credentials cache
and tries to use it, and gets the "Program lacks support for encryption type"
error.

--Ken



More information about the krbdev mailing list