The error means that the server does not support the requested encryption type.

You may have a look here for the list of krb5 error codes:
https://www.netmeister.org/blog/krb5-error-codes-table.html

If you run MIT kerberos, you can run aklog as:
$ KRB5_TRACE=/dev/stderr aklog

which should present you with a detailed trace of the kerberos communication. 
It could help you find out which server denies the request and what else has 
been tried by the client.

Kind regards,
–Michael
_______________________________________________
OpenAFS-info mailing list
OpenAFS-info@openafs.org
https://lists.openafs.org/mailman/listinfo/openafs-info

Reply via email to