RE: [ActiveDir] Kerberos interoperability question

[Doug M. Long]

Sounds like something to do with ticket type. This may help, as it helped me with a samba/AD integration problem.   http://support.microsoft.com/default.aspx?scid=kb;en-us;833708     From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Chris Flesher Sent: Tuesday, July 27, 2004 3:34 PM To: [EMAIL PROTECTED] Subject: [ActiveDir] Kerberos interoperability question   We are trying to have our users authenticate to an MIT5 Kerberos realm. I've followed the process for setting up an XP client to allow a user to get a ticket from the realm, but I keep getting event id 529 and 537 errors, which are pretty cryptic. On the Unix side, the error is as below:   Jul 27 13:11:07 kerberos-beta00 krb5kdc[1347]: [ID 702911 local3.info] AS_REQ (7 etypes {23 -133 -128 3 1 24 -135}) 128.xxx.xxx.xxx: BAD_ENCRYPTION_TYPE: [EMAIL PROTECTED] for krbtgt/[EMAIL PROTECTED], KDC has no support for encryption type Has anyone ever come across this type of scenario, and if so, how did you fix it?   Chris Flesher The University of Chicago NSIT/DCS 1-773-834-8477