On 14 Mar 2006, at 15:51, Sam Evans wrote:
On your KTPASS.EXE command line, add the following switch: -crypto
DES-CBC-MD5
That's what I had before, and it didn't work, so I mailed this list.
I was advised to try DES-CBC-CRC instead.
Hmm, like I said, I read somewhere that 2K3 didn't support CRC mode,
but it may have been wrong.
I think that was the problem. With a des-cbc-md5 host principal key and
default_tkt_enctypes = des-cbc-md5
default_tgs_enctypes = des-cbc-md5
permitted_enctypes = des-cbc-md5
in the [libdefaults] section of /etc/krb5.conf sshd is happy. Thanks
for your help.
