message size incompatible with type error for krb5-1.9 lib using Windows 2003 KDC

Elzey, Blaine A (Blaine) blaine.elzey at
Wed Feb 16 10:16:33 EST 2011

"Message size is incompatible with encryption type" minor error is returned during gss_accept_sec_context.  Previous error was "Encryption type not permitted" which was fixed by adding allow_weak_crypto = true to server's krb5.conf.  This scenario is using SPNEGO.  Any ideas what might be the problem, or a good place to look?

Server (DNS) Solaris 10 with krb5-1.9 libraries
KDC: Windows 2003 SP2 (32-bit)
Client: binary on KDC (Windows SSPI) or statically linked krb5-1.1.1 binary on Server


More information about the krbdev mailing list