https://sipb.mit.edu/doc/kerberized-server/ It might have a vulnerable encryption algorithm by default....