Additional info: kdc.conf includes: master_key_type = des-cbc-crc supported_enctypes = des-cbc-crc:normal des:normal des:v4 des:norealm des:onlyrealm des:afs3 des-cbc-crc:v4 krb5.conf on the kdc includes: default_tgs_enctypes = des-cbc-crc default_tkt_enctypes = des-cbc-crc the krbtgt/REALM@REALM has one key: Key: vno 2, DES cbc mode with CRC-32, Version 4