[38373] in Kerberos

home help back first fref pref prev next nref lref last post

Windows Server 2016 - KDC has no support for encryption type while

daemon@ATHENA.MIT.EDU (Silambarasan Madhappan)
Thu Nov 8 11:01:20 2018

MIME-Version: 1.0
From: Silambarasan Madhappan <silambarasan19@gmail.com>
Date: Thu, 8 Nov 2018 16:55:05 +0530
Message-ID: <CAMknwLt1AWnDTwgOmtgGD1Z3EZJ8iyrvB9gSnPnMhpXzkBzNDA@mail.gmail.com>
To: kerberos@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu

Hi,

I am new to Kerberos.  I am not able to obtain Kerberos
ticket-granting tickets with strong encryption types from "Windows
Server 2016 AD"

My client kerberos configuration as below
========================

$ cat /etc/krb5.conf
[libdefaults]
default_realm = CIFS.COM
default_tkt_enctypes = AES256-CTS-HMAC-SHA1-96 AES128-CTS-HMAC-SHA1-96
default_tgs_enctypes = AES256-CTS-HMAC-SHA1-96 AES128-CTS-HMAC-SHA1-96
preferred_enctypes = AES256-CTS-HMAC-SHA1-96 AES128-CTS-HMAC-SHA1-96
ccache_type = 2

[realms]
CIFS.COM = {
kdc = WIN.cifs.com:88
}

[domain_realm]
.cifs.com = CIFS.COM

[logging]
kdc = FILE:/var/log/krb5kdc.log
admin_server = FILE:/var/log/kadmin.log
default = FILE:/var/log/krb5lib.log
[bash4.2]$

Issue :
=====
$ kinit Administrator
kinit(v5): KDC has no support for encryption type while getting
initial credentials
$

Please let me know  where can I find the kdc configuration types in
Active Directory (Windows Server 2016) ?
Do I have to change any configuration on Kerberos Client or Server ?
Please help me on this.

Thanks,
Silambarasan M
________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

home help back first fref pref prev next nref lref last post