Why there are additional encryption types been generated in new version of adclient?
Question: Why are encryptions that are not specified in centrifydc.conf, being generated in /etc/krb5.keytab?
Answer: Centrify DirectControl Agent will always generate key entries of all encryption types in krb5.keytab, regardless of the adclient.krb5.tkt.encryption.typessetting fromcentrifydc.conf. This issue will be fixed in release 2020.1.