Content-Type: text/plain Content-Disposition: inline Content-Transfer-Encoding: binary MIME-Version: 1.0 X-Mailer: MIME-tools 5.411 (Entity 5.404) RT-Send-CC: X-RT-Original-Encoding: iso-8859-1 Content-Length: 366 How do you have your client configured that it is requesting a ticket of type DES-CBC-MD4? This enctype is not supported by Active Directory nor is it requested by default by MIT Kerberos. Please check your krb5.conf file. If you are defining a list of enctypes, please remove it. Restricting the list of enctypes used by MIT Kerberos can only cause problems.