On 14 Mar 2006, at 15:51, Sam Evans wrote:
>
>>
>>> On your KTPASS.EXE command line, add the following switch: -crypto
>>> DES-CBC-MD5

>>
>> That's what I had before, and it didn't work, so I mailed this list.
>> I was advised to try DES-CBC-CRC instead.
>>

>
> Hmm, like I said, I read somewhere that 2K3 didn't support CRC mode,
> but it may have been wrong.


I think that was the problem. With a des-cbc-md5 host principal key and

default_tkt_enctypes = des-cbc-md5
default_tgs_enctypes = des-cbc-md5
permitted_enctypes = des-cbc-md5

in the [libdefaults] section of /etc/krb5.conf sshd is happy. Thanks
for your help.