Russ Allbery wrote: > Correct. In general, you never want to have Kerberos keys in your KDC for > a service principal for enctypes that that service doesn't support. Is there an easy way to find out which enctypes a service supports? (And why does the poor admin have to worry about this at all?) Marcus