[19656] in Kerberos_V5_Development
krb5 1.15 interop with Windows 2000
daemon@ATHENA.MIT.EDU (Weijun Wang)
Mon Sep 18 08:49:33 2017
From: Weijun Wang <weijun.wang@oracle.com>
Mime-Version: 1.0 (Mac OS X Mail 10.3 \(3273\))
Date: Mon, 18 Sep 2017 20:49:14 +0800
Message-Id: <2181ACDC-5D6D-4D8D-BC7E-B53585A4A85E@oracle.com>
To: "krbdev@mit.edu" <krbdev@mit.edu>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krbdev-bounces@mit.edu
I am running kinit against a Windows 2000 server and see
kinit: KDC has no support for encryption type while getting initial credentials
After I remove the aes-sha2 etypes from default_tkt_enctypes from krb5.conf, kinit succeeds.
Looks like although Windows 2000 uses RC4-HMAC, it is aware of aes-sha1 etypes and allows them in etypes in AS-REQ. However, when aes-sha2 etypes appear there, it fails.
Is this an known issue?
Thanks
Max
_______________________________________________
krbdev mailing list krbdev@mit.edu
https://mailman.mit.edu/mailman/listinfo/krbdev
