title: KDC has no support for encryption type (14)
body: <p>I'm trying to implement SSO with kerberos using spring-security-kerberos extension.</p>
  
  <p>I've created a keytab file and I get the following error when trying to access my webapp:</p>
  
  <pre><code>GSSException: Failure unspecified at GSS-API level (Mechanism level: Checksum failed)
  </code></pre>
  
  <p>I tried to test my keytab according to <a href="https://stackoverflow.com/a/13859217/2204206">this post</a>.</p>
  
  <p>The keytab was created with the following command:</p>
  
  <pre><code>ktpass /out http-web.keytab /mapuser testing@MYDOMAIN.COM /princ HTTP/testing@MYDOMAIN.COM /pass myPass /ptype KRB5_NT_PRINCIPAL -crypto RC4-HMAC-NT /kvno 0
  </code></pre>
  
  <p>My krb5.conf is as follow</p>
  
  <pre><code>[libdefaults]
  default_realm = MYDOMAIN.COM
  permitted_enctypes =  aes256-cts arcfour-hmac-md5 aes128-cts rc4-hmac des3-cbc-sha1 des-cbc-md5 des-cbc-crc
  default_tgs_enctypes = aes256-cts arcfour-hmac-md5 aes128-cts rc4-hmac des3-cbc-sha1 des-cbc-md5 des-cbc-crc
  default_tkt_enctypes = aes256-cts arcfour-hmac-md5 aes128-cts rc4-hmac des3-cbc-sha1 des-cbc-md5 des-cbc-crc
  kdc_timesync = 1
  ccache_type = 4
  forwardable = true
  proxiable = true
  
  [realms]
  MYDOMAIN.COM = {
  kdc = controller1.mydomain.com:88
  kdc = controler2.mydomain.com:88
  kdc = controller3.mydomain.com:88
  admin_server = controller3.mydomain.com
  default_domain = MYDOMAIN.COM
  }
  
  [domain_realm]
  .mydomain.com = MYDOMAIN.COM
  mydomain.com = MYDOMAIN.COM
  
  [login]
  krb4_convert = true
  krb4_get_tickets = false
  </code></pre>
  
  <p>I get the following error:</p>
  
  <pre><code> KDC has no support for encryption type (14)
  </code></pre>
  
  <p>I've tried enabling DES, AES-128 and AES-256 for the account of the SPN but it didn't solve the problem.</p>
  
  <p>What am I missing here?</p>
  
  <p>Thanks,
  Lior</p>