Interesting idea, but seems to require a time machine. The kerberos in centos 8 is 1.16. I
believe Ubuntu 18 is also.
On Nov 22, 2019, at 1:21 PM, Alexander Bokovoy via FreeIPA-users
<freeipa-users@lists.fedorahosted.org<mailto:freeipa-users@lists.fedorahosted.org>>
wrote:
ktutil> add_entry -password -p principal -k kvno -f
The key part here is '-f' which fetches a salt from KDC. Otherwise,
you'd need to use '-s salt' option to specify a salt manually. Option
'-f' appeared in MIT 1.18, '-s' in MIT Kerberos 1.17.