Unix & Linux Stack Exchange is a question and answer site for users of Linux, FreeBSD and other Un*x-like operating systems. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

When attempting to run kinit to log into a Kerberos V5 realm I get the following error on a default install FreeBSD 9.1-RELEASE

kinit: krb5_get_init_creds: salt type 3 not supported

Any ideas?

share|improve this question
Do you have any default etypes defined in your /etc/krb5.conf? – jsbillings Jun 29 '13 at 1:40
I do not have any default etypes configured in /etc/krb5.conf – JonnyRo Jun 29 '13 at 21:56
Is it possible to debug what etypes the server supports from the client side? – JonnyRo Jun 29 '13 at 21:56

(Not a complete solution, as I don't know how to fix the problem, but this should at least give you an idea where to look.)

“Salt type” refers to the algorithm used to hash the password by the crypt function. The salt type is visible in the password hash (the second field of master.passwd) which starts with the salt type between dollars (so $3$… in your case).

Salt type 3 under FreeBSD is an obsolete Windows hashing method, so it's surprising to see it here. I don't understand Kerberos well enough to know whether that value is coming from the client or the server.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.