Russ Allbery wrote: > Correct. In general, you never want to have Kerberos keys in your KDC for > a service principal for enctypes that that service doesn't support.
Is there an easy way to find out which enctypes a service supports? (And why does the poor admin have to worry about this at all?) Marcus -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]