Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

I'm using Windows Server 2008 and Windows Vista and 7 for cross realm authentication using MIT Kerberos 1.6 but when i try to login with a user the KDC answers:

(wireshark output)

error_code: KRB5KDC_ERR_ETYPE_NOSUPP (14) ... e-text: BAD_ENCRYPTION_TYPE

I want to know how can I change the encryption type method to be compatible with the KDC (i tried a XP client and it worked fine).

Many thanks!

share|improve this question
    
Do you mean "export" to the hard drive? You can import from somewhere to get videos into the program you're using, but you can't improt to the drive. –  Daniel H Aug 28 '09 at 2:32
add comment

3 Answers

From the Windows 7 technical library: Changes in Kerberos Authentication

Most likely, your Kerberos server is expecting DES encryption which has been disabled by default in Windows 7. It has been replaced primarily by AES. The linked article contains instructions for re-enabling DES encryption via group policy. It's fairly simple. But you should consider upgrading your Kerberos configuration to support AES instead.

share|improve this answer
add comment

Which side is returning the bad crypto error? Is it the Windows 7 client or the server?

Also, is it possible to try Kerberos 1.7? It was released about a month ago from MIT, it has some new configurable encryption settings for disabling weak crypto.

share|improve this answer
add comment

Even I have issues with Kerberos cross relam authentication from Windows 7 OS. It works fine in Win XP. Even the sites hosted on Unix host which supported kerberos authentication is not working from Windows 7 machine. Any idea what is the cause for this issue?

Thanks Michelle

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.