Re: Ticket enctype question

"Ben" == Ben Poliakoff <benp@xxxxxxxx> writes:

Ben> An interesting interoperability wrinkle arises if you have
Ben> any Windows 2K/XP machines with native kerberos libraries
Ben> (not KfW) pointed at your MIT KDC for authentication. In my
Ben> experiments a few months ago, such machines *fail* to get
Ben> tickets if the first enctype listed in the KDC's
Ben> 'supported_enctypes' is not 'des-cbc-crc:normal'.

That has not been MIT's experience doing interoperability testing with
Microsoft.

________________________________________________
Kerberos mailing list Kerberos@xxxxxxx
https://mailman.mit.edu/mailman/listinfo/kerberos

.

Relevant Pages

  • Re: Ticket enctype question
    ... Ben> An interesting interoperability wrinkle arises if you have ... Ben> any Windows 2K/XP machines with native kerberos libraries ...
    (comp.protocols.kerberos)
  • Re: Ticket enctype question
    ... 2K/XP machines with native kerberos libraries pointed at ... your MIT KDC for authentication. ... such machines *fail* to get tickets if the first enctype listed in the ...
    (comp.protocols.kerberos)