Re: Interoperating with Win2K

[Assar Westerlund <assar@sics.se>]

Mark Davies <mark@MCS.VUW.AC.NZ> writes:
> If i try to telnet to this box, from this box I get the following:
> 
>  netbsd# telnet -l duncan netbsd.poc.vuw.ac.nz
>  Trying 130.195.225.30...
>  Connected to netbsd.poc.vuw.ac.nz.
>  Escape character is '^]'.
>  [ Trying KERBEROS5 ... ]
>  Kerberos V5: mk_req failed (KDC has no support for checksum type)
>  [ Trying KERBEROS5 ... ]
>  Kerberos V5: mk_req failed (KDC has no support for checksum type)
>  Password:
> 
> Any ideas whats failing here? How to get around it?

I believe it's the case of the w2k KDC not supporting des-cbc-md5.
Try adding:

[libdefaults]
        default_etypes_des = des-cbc-crc

to your /etc/krb5.conf. (or des-cbc-md4)

And tell us how it goes.

> Once I get this working I can move on to trying cross realm authentication
> which is what I actually want to do.

I haven't gotten around to trying that yet.

/assar