KDC has no support for encryption type while connecting to SQL server on RHEL8

by

After upgrading to RHEL8 or Centos8, connecting to SQL server using trusted authentication may fail with the following error:

pyodbc.Error: ('HY000', '[HY000] [Microsoft][ODBC Driver 17 for SQL Server]SSPI Provider: KDC has no support for encryption type (851968) (SQLDriverConnect)')

rc4 encryption is still heavily used in AD environments but it is already disabled by default. Therefore, to re-enabled it again, simply call:

update-crypto-policies --set DEFAULT:AD-SUPPORT

After that, reboot the server and the SQL connection would work.

Leave a Comment