Content-Type: text/plain Content-Disposition: inline Content-Transfer-Encoding: binary X-RT-Original-Encoding: iso-8859-1 Content-Length: 493 The packet trace is attached. Notice that the enc-part enc-type is des-cbc-md5 and the ticket-enc-part enc-type is des-cbc-crc as is the etype-info2 des-cbc-crc. I have requested that Karl send the principal etype configuration as well as the kdc.conf and krb5.conf files. I don't see anything obviously wrong in the sources. Microsoft has been unable to reproduce the problem but they may not have the correct configuration. Could the UMich referral patch be breaking this in some way?