What is wrong with the heimdal configuration?
kinit test
test@REALM’s Password:
kinit: krb5_get_init_creds: No ENC-TS found
An /etc/krb5.conf contains:
default_tgs_enctypes = des-cbc-crc
default_tkt_enctypes = des-cbc-crc
default_etypes = des-cbc-crc
default_etypes_des = des-cbc-crc
fcc-mit-ticketflags = true
You really didn’t provide much info.
I suggest showing us the output of
klistboth before and afterkinit.But as best I can determine: ENC-TS is the encrypted TimeStamp used in pre-authentication.
For whatever reason, the server is not including the ENC-TS section of the Kerberos response.
The section of
krb5.confthat you shared does not seem related to this pre-authentication setting.