Matt Zagrabelny <[email protected]> writes:

> Thanks for the quick help, Russ. Still the same problem, though.

> # grep -B1 allow_weak_crypto /etc/krb5.conf
> [libdefaults]
>     allow_weak_crypto = true

> # /etc/init.d/krb5-kdc restart

> % telnet blah...

> AS_REQ (1 etypes {1}) 10.25.1.14: CANT_FIND_CLIENT_KEY:
> [email protected] for krbtgt/[email protected], KDC has no support
> for encryption type

> Any other ideas?

You need it on the client in addition to the server.

-- 
Russ Allbery ([email protected])             <http://www.eyrie.org/~eagle/>
________________________________________________
Kerberos mailing list           [email protected]
https://mailman.mit.edu/mailman/listinfo/kerberos

Reply via email to