Decrypt integrity check failed

classic Classic list List threaded Threaded
1 message Options
Reply | Threaded
Open this post in threaded view
|

Decrypt integrity check failed

vicky_recw
Hi,

In AS_REP I see that domain controller is sending the enc type as etype:
eTYPE-AES256-CTS-HMAC-SHA1-96 (18)

however in TGS_REP it is sending as etype: eTYPE-ARCFOUR-HMAC-MD5 (23),

This is causing the " Decrypt integrity check failed" error. Any reason why
domain controller will behave like it?

--Vishal
________________________________________________
Kerberos mailing list           [hidden email]
https://mailman.mit.edu/mailman/listinfo/kerberos