KDC unreachable/Encryption not supported by the KDC

[scheinig]

Hi maxTim,

thanks for the output.
I guess the root cause is the low function level with 2003.
So you can raise the domain and function level but I recomment to do this first in a testenvironment (clone)

How-to: Raise Domain Functional Level

Howto raise domain functional level Regarding Windows 2016 Server there is an article from Microsoft. For Samba there is an article in the Samba-Wiki. To archive the same goal functional level can be increased on UCS, too. Currently Samba does not support to raise the functional level on the server side higher than 2008 R2. Please check your Samba version! This article is written for Samba 4.7! The tutorial was also successfully done with Samba 4.10.1, but you have to use a different…

Here there is a known issue regarding the windows clients:

UCS 4.1 AD functioning level

In one case we observed that with the very first automatic change of the Windows clients’ machine account password after the functioning levels were updated, the clients temporarily lost the ability to authenticate against the Domain controllers. All that needed to be done was to reboot the Windows clients and everything was fine again. Subsequent machine account password changes are fine, too. By default, Windows clients change their machine account password every 30 days. That means they don…