[32202] in Kerberos

home help back first fref pref prev next nref lref last post

Re: CANT_FIND_CLIENT_KEY

daemon@ATHENA.MIT.EDU (Russ Allbery)
Tue Mar 30 17:13:55 2010

From: Russ Allbery <rra@stanford.edu>
To: Matt Zagrabelny <mzagrabe@d.umn.edu>
In-Reply-To: <1269982694.4868.165.camel@grateful.d.umn.edu> (Matt Zagrabelny's
	message of "Tue, 30 Mar 2010 15:58:14 -0500")
Date: Tue, 30 Mar 2010 14:13:47 -0700
Message-ID: <87d3ylikc4.fsf@windlord.stanford.edu>
MIME-Version: 1.0
Cc: kerberos <kerberos@mit.edu>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu

Matt Zagrabelny <mzagrabe@d.umn.edu> writes:

> Through some trial-and-error I am currently getting the following error
> in the kdc.log:

> AS_REQ (1 etypes {1}) 10.25.1.14: CANT_FIND_CLIENT_KEY:
> mzagrabe@D.UMN.EDU for krbtgt/D.UMN.EDU@D.UMN.EDU, KDC has no support
> for encryption type

> I assume the encryption type is (1) des-cbc-crc.

> How do I make the KDC have support for the encryption type? It looks
> like I already have it:

Add:

[libdefaults]
    allow_weak_crypto = true

-- 
Russ Allbery (rra@stanford.edu)             <http://www.eyrie.org/~eagle/>
________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

home help back first fref pref prev next nref lref last post