Comment # 2 on bug 1222605 from Samuel Cabrero

This is probably related to crypto-policies:

> * jue feb 29 2024 Pedro Monreal <pmonreal@suse.com>
> - Add crypto-policies support [bsc#1211301]
>   * Update krb5.conf in vendor-files.tar.bz2

> $ ls -l /etc/krb5.conf.d/crypto-policies
> lrwxrwxrwx 1 root root 40 jul  1 09:51 /etc/krb5.conf.d/crypto-policies -> ../crypto-policies/back-ends/krb5.config
> $ cat /etc/krb5.conf.d/crypto-policies
> [libdefaults]
> permitted_enctypes = aes256-cts-hmac-sha384-192 aes128-cts-hmac-sha256-128 aes256-cts-hmac-sha1-96 aes128-cts-hmac-sha1-96 camellia256-cts-cmac camellia128-cts-cmac

The default value for permitted_enctypes includes "arcfour-hmac-md5". You might
need to adjust your config.