Hi All,
We recently upgraded from XIR2 to XI 3.1. Using Windows AD Authentication
The users migrated from XIR2 are able to authenticate using Windows AD accounts successfully to JAVA as well as .NET infoview. But when a new user is created in AD, it comes over in the groups in CMC and the user is able to login using .NET infoview but not through JAVA infoview using the Windows AD account.
Kinit for the new user fails with the error:
Exception: krb_error 14 KDC has no support for encryption type (14) KDC has no
upport for encryption type
KrbException: KDC has no support for encryption type (14)
at sun.security.krb5.KrbAsRep.<init>(KrbAsRep.java:66)
at sun.security.krb5.KrbAsReq.getReply(KrbAsReq.java:486)
at sun.security.krb5.KrbAsReq.getReply(KrbAsReq.java:444)
at sun.security.krb5.internal.tools.Kinit.sendASRequest(Kinit.java:310)
at sun.security.krb5.internal.tools.Kinit.<init>(Kinit.java:259)
at sun.security.krb5.internal.tools.Kinit.mC:\Program Files
Kinit for existing users succeds.
In the stdout.log we are getting the error:
TGT using AS Exchange [Krb5LoginModule] authentication failed KDC has no support for encryption type (14)
How to solve this issue.
Thanks in advance for your help.
V