3 okt 2006 kl. 11.46 skrev Juha Jäykkä:
The kdc only hands out one ticket, and it chooses the first enctype
that the service thinks it support (from the database) with the
first keytype that the client support.
If the service only supports des-cbc-crc, remove all other enctypes from the entry.
You can force the client to only annonce it support des-cbc-crc by
using kgetcred -e des-cbc-crc service/principal@REALM.