[OpenAFS] windows pw incorrect w. kerb5

David Botsch dwb7@ccmr.cornell.edu
Tue, 22 Jun 2004 13:57:42 -0400

Hi, folks.

We are seeing password incorrect messages for Windows users who change 
their passwords on the kerb5 server and thereby get more than one 
encryption key type.

Users who change their passwords have encryption key types of:

Number of keys: 3
Key: vno 26, Triple DES cbc mode with HMAC/sha1, no salt
Key: vno 26, DES cbc mode with RSA-MD5, no salt
Key: vno 26, DES cbc mode with CRC-32, AFS version 3

Presumably, the wrong key is being used (our windows clients are doing 
kerb4 -- some 1.3.64 and some 1.2.8a clients)?

David William Botsch
Consultant/Advisor II
CCMR Computing Facility