[32206] in Kerberos
Re: CANT_FIND_CLIENT_KEY
daemon@ATHENA.MIT.EDU (Russ Allbery)
Tue Mar 30 18:07:16 2010
From: Russ Allbery <rra@stanford.edu>
To: Matt Zagrabelny <mzagrabe@d.umn.edu>
In-Reply-To: <1269986171.4868.176.camel@grateful.d.umn.edu> (Matt Zagrabelny's
message of "Tue, 30 Mar 2010 16:56:11 -0500")
Date: Tue, 30 Mar 2010 15:07:08 -0700
Message-ID: <87vdcda2gj.fsf@windlord.stanford.edu>
MIME-Version: 1.0
Cc: kerberos <kerberos@mit.edu>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
Matt Zagrabelny <mzagrabe@d.umn.edu> writes:
> On Tue, 2010-03-30 at 14:46 -0700, Russ Allbery wrote:
>> You need it on the client in addition to the server.
> Good to know. :)
> Unfortunately, the client is a Cisco Catalyst 3750. :/
> workstation% telnet.netkit switch3750
> Trying 10.25.1.14...
> 'autologin': unknown argument ('toggle ?' for help).
> Connected to switch3750.d.umn.edu.
> Escape character is '^]'.
Then that's probably not the problem. The Cisco box almost certainly
hasn't disabled DES (it's probably the only enctype that it supports).
Please show the getprinc output for your krbtgt/* key and the user
principal that you're using. I bet one or the other of them has no DES
key.
--
Russ Allbery (rra@stanford.edu) <http://www.eyrie.org/~eagle/>
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
