30 March,17 at 01:54 AM
• Windows 2000 server and Windows Server 2003:
arcfour-hmac-md5, des-cbc-md5, and des-cbc-crc.
• Windows Server 2008 and higher domain functional level supports these additional types:
aes128-cts and aes256-cts.
Although the agent will support these types in an environment lower than 2008 domain functional level since the domain doesn't support it they will not be used and may cause extra network round trips.
Note If you specify an encryption type that is not listed as a permitted encryption type in the centrifydc.conf file, the key table entry will not be created and an error is displayed. You should verify that the encryption types you want to use are listed for the configuration parameter below:
adclient.krb5.permitted.encryption.types
For example: