On 2013-07-26 22:30, Andrew Deason wrote: > On Fri, 26 Jul 2013 14:07:46 +0200 > Lars Schimmer <[email protected]> wrote: > >> Ok, now with access to such a machine: >> krbtgt/[email protected] >> Etype (skey, tkt): AES-256 CTS mode with 96-bit SHA-1 HMAC, AES-256 CTS >> mode with 96-bit SHA-1 HMAC >> afs/cgv.tugraz.at/CGV.TUGRAZ.AT >> Etype /skey, tkt): DES cbc mode with CRC-32, AES-256 CTS mode with >> 96-bit SHA-1 HMAC > > By any chance, do you happen to have the registry entry > > HKLM\SYSTEM\CurrentControlSet\services\kdc\KdcUseRequestedEtypesForTickets > > set to 1? That seems like it may cause that behavior, from a quck test I > just did.
Yes, I did set it. Lets see what happens if I set it to 0. MfG, Lars Schimmer -- ------------------------------------------------------------- TU Graz, Institut für ComputerGraphik & WissensVisualisierung Tel: +43 316 873-5405 E-Mail: [email protected] Fax: +43 316 873-5402 PGP-Key-ID: 0x4A9B1723
signature.asc
Description: OpenPGP digital signature
