[OpenAFS] Migrating away from single DES

ProbaNet SRLS info@probanet.it
Mon, 14 Sep 2020 10:32:24 +0200


    Recent releases of krb5 (> 1.18) no longer support single des
encryption (the "allow_weak_crypto = yes" option in krb5.conf client
side has no longer effect), so now we get this error with "aklog -d":


Kerberos error code returned by get_cred : -1765328370
aklog: Couldn't get XXXXX AFS tickets:
aklog: KDC has no support for encryption type while getting AFS tickets


How should we proceed?