Hi all, I am attempting to upgrade an instance of mod_webauth/mod_webauthldap from version webauth-3.6.1 to webauth-4.2.2, and running into an unexpected error.
The new Apache instance is set up on a new server, but with the same configuration as the old server except the newer version of webauth. The webauth/webauthldap Kerberos key tabs are the same too on the two servers. The old server with the older version of mod_webauth works, but the new server is getting the following error: webauthldap: cannot get ticket: KDC has no support for encryption type (-1765328370) Has someone here run into this before? Or could someone shed some light on this? Many thanks. I noticed the key tab contains a principle with only DES ces mode support with CRC-32. Since the old set up continues to work, it would seem to me we still support DES even though that is planned to be phased out. The key tab listing is like this. -----------START------------------- root# klist -e -k keytab Keytab name: FILE:webauth/keytab KVNO Principal ---- -------------------------------------------------------------------------- 5 webauth/[email protected] (DES cbc mode with CRC-32) --------END-------------------------
