On 2/4/22 2:19 AM, Dr. Lars Hanke wrote: > additional info: SASL(-1): generic failure: GSSAPI Error: Unspecified > GSS failure. Minor code may provide more information (KDC has no support for > encryption type)
It might help to compare the KDC log entry for this TGS request on the old and new KDC. During a TGS request, "KDC has no support for encryption type" can mean that the KDC could not select an encryption type for the session key. The session key enctype must be present in (1) the enctypes listed in the KDC request, (2) the KDC's permitted_enctypes if set, and (3) the enctypes supported by the server DB entry (which is usually the enctypes of the server's long-term keys, unless overridden by the session_enctypes string attribute). ________________________________________________ Kerberos mailing list Kerberos@mit.edu https://mailman.mit.edu/mailman/listinfo/kerberos
