Re: Windows Server 2016 - KDC has no support for encryption type while getting initial credentials

2018-11-08 Thread Todd Grayson
oops, typo by me: You are hard forcing AES for initial ticket granting ticket with the settings you are using for enctypes. Should read You are hard forcing AES for initial session key and ticket granting ticket with the settings you are using for enctypes. On Thu, Nov 8, 2018 at 9:35 AM Todd G

Re: Windows Server 2016 - KDC has no support for encryption type while getting initial credentials

2018-11-08 Thread Todd Grayson
You are hard forcing AES for initial ticket granting ticket with the settings you are using for enctypes. Unset (comment out) the 3 enctype lines for one of your tests. How to comment out lines in the krb5.conf is covered in the second paragraph here: https://web.mit.edu/kerberos/krb5-latest/do

Windows Server 2016 - KDC has no support for encryption type while getting initial credentials

2018-11-08 Thread Silambarasan Madhappan
Hi, I am new to Kerberos. I am not able to obtain Kerberos ticket-granting tickets with strong encryption types from "Windows Server 2016 AD" My client kerberos configuration as below $ cat /etc/krb5.conf [libdefaults] default_realm = CIFS.COM default_tkt_enctypes = AES