Content-Type: text/plain Content-Disposition: inline Content-Transfer-Encoding: binary MIME-Version: 1.0 X-Mailer: MIME-tools 5.420 (Entity 5.420) Subject: kadmin enctype naming for DES is deceptive X-RT-Original-Encoding: iso-8859-1 Content-Length: 511 In the current kadmin, "DES cbc mode with CRC-32, no salt" is in fact salted with the default v5 salt method, whereas "DES cbc mode with CRC-32, Version 4" is actually not salted. I don't think this could be more confusing if it was designed to be as confusing as possible. :) Solving 5014 would help here, but only partly. The basic problem is that :normal does not actually mean no salt, but that's how it's displayed. Perhaps that string in the kadmin client should be changed to "default salt" instead?