Decrypt integrity check failed

classic Classic list List threaded Threaded
1 message Options
Reply | Threaded
Open this post in threaded view

Decrypt integrity check failed


In AS_REP I see that domain controller is sending the enc type as etype:
eTYPE-AES256-CTS-HMAC-SHA1-96 (18)

however in TGS_REP it is sending as etype: eTYPE-ARCFOUR-HMAC-MD5 (23),

This is causing the " Decrypt integrity check failed" error. Any reason why
domain controller will behave like it?

Kerberos mailing list           [hidden email]