Unable to have KDC use different enctype for session/service key
Sam Hartman
hartmans at MIT.EDU
Tue Sep 17 12:25:01 EDT 2002
>>>>> "Ken" == Ken Hornstein <kenh at cmf.nrl.navy.mil> writes:
>> Well, from the command line kinit foo kvno -e des-cbc-crc
>> krbtgt/realm at realm
Ken> Hm. Unfortunately, that doesn't seem to help me. I just
Ken> tried that, and while it does get a TGT with a single DES
Ken> encryption key, the old client library doesn't use it; it
Ken> picks the first one out of the credentials cache and tries to
Ken> use it, and gets the "Program lacks support for encryption
Ken> type" error.
Interesting. I thought that got fixed about the same time that we
stopped confusing the ticket encryption type with the session key
type.
More information about the krbdev
mailing list