Please take a look at http://cr.openjdk.java.net/~weijun/8016594/webrev.00/ Instead of always reading tickets with session key of DES/RC4 etypes, it should accept any ticket in the default_tkt_enctypes setting. No reg test, needs a SQE test running with Windows 2008 as server. Thanks Max