[25057] in Kerberos
FIXED (need you advice): slave server :Decrypt integrity checkfailed
daemon@ATHENA.MIT.EDU (FM)
Mon Dec 5 15:41:54 2005
Message-ID: <4394A5C2.6070307@lexum.umontreal.ca>
Date: Mon, 05 Dec 2005 15:40:34 -0500
From: FM <dist-list@lexum.umontreal.ca>
MIME-Version: 1.0
CC: Mailing List Kerberos <kerberos@mit.edu>
In-Reply-To: <43948E66.6070805@lexum.umontreal.ca>
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
What I did :
delete krb5-server from slave and /var/kerberos
then :
on slave
I install krb5-server
I copy /var/kerberos/.k5.REALM from master to slave
I configure and start kpropd
have a krb5.keytab with : host/fqdn_slave@REALM (from master)
on master, sync with kprop
and on slave again : start the krb5kdc
authentification : ok
is it a good thing to copy the /k5 ?
FM wrote:
> Hello,
> I'm trying to create a slave server (RHEL 3 on master and slave).
> on slave :
> I installed krb5-server
> I create db with kdb5_util create -s
> I configure and start kpropd
> I have a krb5.keytab with : host/fqdn_slave@REALM (from master)
>
> on the master :
>
> I dump master DB and sync it witgh kprop :
> 32768 bytes sent.
> 65536 bytes sent.
> 69148 bytes sent.
> Database propagation to slaver: SUCCEEDED
>
> now I'm trying to kinit on the slave (I modify the krb5.conf on the
> station) but :
>
> Dec 05 13:52:57 slave krb5kdc[5065](info): AS_REQ (5 etypes {16 23 1 3
> 2}) 192.168.4.29(88): DECRYPT_SERVER_KEY: user@REALM for
> krbtgt/REALM@REALM, Decrypt integrity check failed
>
> Do you have a idea ?
>
> Thanks !
> ________________________________________________
> Kerberos mailing list Kerberos@mit.edu
> https://mailman.mit.edu/mailman/listinfo/kerberos
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
