The error means that the server does not support the requested encryption type.
You may have a look here for the list of krb5 error codes: https://www.netmeister.org/blog/krb5-error-codes-table.html If you run MIT kerberos, you can run aklog as: $ KRB5_TRACE=/dev/stderr aklog which should present you with a detailed trace of the kerberos communication. It could help you find out which server denies the request and what else has been tried by the client. Kind regards, –Michael _______________________________________________ OpenAFS-info mailing list OpenAFS-info@openafs.org https://lists.openafs.org/mailman/listinfo/openafs-info