Back to HaCluster main section
If you encounter “KDC has no support for encryption type while getting credentials”, you have to adjust Kerbros Encryption types on the HaCluster main configuration.
This feature is available on Artica HaCluster 4.30 with Service Pack instable 945 or Artica HaCluster v4.40.
Artica Proxy clients should be on Artica v4.30 Service Pack instable 945 OR Artica v4.30 Service Pack 206 and HotFix 20220920
- On the Active Directory section, Click on “Supported Encryption Type” button
By default, if nothing defined, Artica use rc4-hmac des3-hmac-sha1
You have 2 ways to set the Encryption types:
¶ The first one is the use of drop-down list
- Windows 2000/2003 which correspond to:
rc4-hmac des-cbc-crc des-cbc-md5 - Windows 2008/2012 or Windows 2016/2019 (aslo 2022) which correspond to :
aes256-cts-hmac-sha1-96 rc4-hmac des-cbc-crc des-cbc-md5
¶ The second is to build your own Encryption types
In this case, turn ON the “Use Your Own values” option and set the Encryption type in the text field.
Note that,
rc4-hmacis required because of the reasons Microsoft is describing in their document
After apply settings, you have to send the reconfiguration order to Artica clients