Default to normal salt instead of "ignore" krb5_string_to_keysalts() treats an empty salt field as -1 ("ignore"), rather than as the normal salttype. Default to normal instead, so that omitting a salttype works as expected. https://github.com/krb5/krb5/commit/25a3b1bd943199bcaa3a9d3a43f90f8ea05f1124 Author: Tom Yu Commit: 25a3b1bd943199bcaa3a9d3a43f90f8ea05f1124 Branch: master src/lib/kadm5/str_conv.c | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-)