If not, you will get an error "Encryption or checksum type is not supported."
To enable it, you need to connect to the domain controller machine, and run the Active Directory application. Then, select "Users", and choose a user named:
my_iseries_1_krbsvr400
(There
also can be others: my_iseries_2_krbsvr400, …)
On the properties of that user, choose "Account", and check "use
DES encryption".