When attempting to run kinit to log into a Kerberos V5 realm I get the following error on a default install FreeBSD 9.1-RELEASE

kinit: krb5_get_init_creds: salt type 3 not supported

Any ideas?

  • Do you have any default etypes defined in your /etc/krb5.conf? – jsbillings Jun 29 '13 at 1:40
  • I do not have any default etypes configured in /etc/krb5.conf – JonnyRo Jun 29 '13 at 21:56
  • Is it possible to debug what etypes the server supports from the client side? – JonnyRo Jun 29 '13 at 21:56

(Not a complete solution, as I don't know how to fix the problem, but this should at least give you an idea where to look.)

“Salt type” refers to the algorithm used to hash the password by the crypt function. The salt type is visible in the password hash (the second field of master.passwd) which starts with the salt type between dollars (so $3$… in your case).

Salt type 3 under FreeBSD is an obsolete Windows hashing method, so it's surprising to see it here. I don't understand Kerberos well enough to know whether that value is coming from the client or the server.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.