Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm using Windows Server 2008 and Windows Vista and 7 for cross realm authentication using MIT Kerberos 1.6 but when i try to login with a user the KDC answers:

(wireshark output)


I want to know how can I change the encryption type method to be compatible with the KDC (i tried a XP client and it worked fine).

Many thanks!

share|improve this question
Do you mean "export" to the hard drive? You can import from somewhere to get videos into the program you're using, but you can't improt to the drive. – Daniel H Aug 28 '09 at 2:32

From the Windows 7 technical library: Changes in Kerberos Authentication

Most likely, your Kerberos server is expecting DES encryption which has been disabled by default in Windows 7. It has been replaced primarily by AES. The linked article contains instructions for re-enabling DES encryption via group policy. It's fairly simple. But you should consider upgrading your Kerberos configuration to support AES instead.

share|improve this answer

Which side is returning the bad crypto error? Is it the Windows 7 client or the server?

Also, is it possible to try Kerberos 1.7? It was released about a month ago from MIT, it has some new configurable encryption settings for disabling weak crypto.

share|improve this answer

Even I have issues with Kerberos cross relam authentication from Windows 7 OS. It works fine in Win XP. Even the sites hosted on Unix host which supported kerberos authentication is not working from Windows 7 machine. Any idea what is the cause for this issue?

Thanks Michelle

share|improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .