What is wrong with the heimdal configuration?

kinit test

test@REALM's Password: kinit: krb5_get_init_creds: No ENC-TS found

An /etc/krb5.conf contains: default_tgs_enctypes = des-cbc-crc default_tkt_enctypes = des-cbc-crc defa开发者_运维知识库ult_etypes = des-cbc-crc default_etypes_des = des-cbc-crc fcc-mit-ticketflags = true

You really didn't provide much info. I suggest showing us the output of klist both before and after kinit.

But as best I can determine: ENC-TS is the encrypted TimeStamp used in pre-authentication. For whatever reason, the server is not including the ENC-TS section of the Kerberos response.

The section of krb5.conf that you shared does not seem related to this pre-authentication setting.