Re: How to replace pam_krb5 on RHEL 8 systems

>   The problem is that we (well, at least me!) have no idea which enctype 
>is expected, and which enctypes are actually tried. Debug output is not 
>too helpful here. Any ideas on how to get useful information?

You said you rekeyed your AFS environment with an AES256 key, but
the error message says:

"error obtaining credentials for 'afs/[email protected]' (enctype=1) on behalf of ....: No credentials found with supported encryption types"

Enctype 1 is ... single-DES (specifically, des-cbc-crc).  So you're asking
for a single-DES key but the server only supports AES256, so that isn't
surprising you get that error.  Is the client code limiting the enctype
to single-DES?  If so, that's your problem.

--Ken