[OpenAFS] Unable to get tokens after replacing Win2k3 DC with a Win2k8 DC

Jeffrey Altman jaltman@secure-endpoints.com
Sun, 17 Apr 2011 21:53:19 -0400


This is an OpenPGP/MIME signed message (RFC 2440 and 3156)
--------------enig9A2F0107F3EBBD4B016B7B93
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

On 4/17/2011 9:35 PM, Thomas Smith wrote:
> Hi,
>=20
> Our AD admins replaced our local DC. We were working great when the DC
> was Win2k3--since they replaced it with a Win2k8 DC,

Win2K8 disables the DES enctype by default.  It must be enabled for AFS
tokens.

Jeffrey Altman


--------------enig9A2F0107F3EBBD4B016B7B93
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (MingW32)

iQEcBAEBAgAGBQJNq5mRAAoJENxm1CNJffh4HjcIAKrkpC1qk1qhfLScf+u//kLQ
A4Lis+L2xgewCXcfSUeRWMezVryiEucLQadV7WVETpoFmlXwHKZEHeybmWjLf0a2
c6xp+zowE2vEZWME8/QkKNj7K03bLyQw9hn5UqzFRtcY5fZUkssLYkLZWkPqG8eg
6Xh3tPrOLc47gmgUYLUJdbTKkQKqKQjXEN7JndmY9Vs880td/7zx1jipkBF3+5m8
etbsMGSVDuHSXf8luSwmoo797aGI7+lAdx8lxO5fOawwj4YVHyv5Q5J6Z7IWQtG3
G4k+2v7TDegGrEWtpic4XGEk5c2y6gYXKKbe/bVGmo1TX6Hk/3TXe3agRN90HGU=
=gwKQ
-----END PGP SIGNATURE-----

--------------enig9A2F0107F3EBBD4B016B7B93--