Issues with keytab creation related to switch to w2k3 w/ ktutil
jaltman at columbia.edu
Wed Apr 7 12:16:38 EDT 2004
Are you sure you are receiving the correct enctype?
Doug has reported that he is receiving DES-CBC-MD5
when he is expecting DES-CBC-CRC from Windows 2003.
Do you have network traces of the exchange?
Neulinger, Nathan wrote:
>Sam, give me a little credit please. I'm well aware of the kvno issue.
>If it were just a simple rtfm answer like that, I wouldn't have asked
>the question here in the first place.
>The princ is being re-created each time, and we know the kvno, and have
>verified that with adsiedit. The keytab has the appropriate key with
>that kvno in it.
>If it were a simple kvno mismatch, this would be easy to resolve - I
>should know, we already had to deal with that for authentications
>against win2k3 boxes for our afs service principals and krb524 - which
>was resolved without any significant issues.
More information about the krbdev