>> If Allow_weak_crypto = true is making things work better with
>> Windows,
jean-yves> something is broken somewhere else to cause this.
jean-yves> Without this parameter in krb5.conf the auth against the
jean-yves> ADS to access services like http goes wrong and asks fora
jean-yves> login/pass instead of using the kerberos tickets,
jean-yves> claiming unsupported enctype.
This sounds like a problem outside of the krb5 package.
>>>>> "jean-yves" == jean-yves chateaux <email address hidden> writes:
>> If Allow_weak_crypto = true is making things work better with
>> Windows,
jean-yves> something is broken somewhere else to cause this.
jean-yves> Without this parameter in krb5.conf the auth against the
jean-yves> ADS to access services like http goes wrong and asks fora
jean-yves> login/pass instead of using the kerberos tickets,
jean-yves> claiming unsupported enctype.
This sounds like a problem outside of the krb5 package.