[28167] in Kerberos
Re: kprop: Connection refused in call to connect while opening
daemon@ATHENA.MIT.EDU (Le Trung Kien)
Wed Aug 1 05:59:46 2007
Message-ID: <cb25fa940708010259l7d5876c1v5eb7c7317ddfa6a3@mail.gmail.com>
Date: Wed, 1 Aug 2007 16:59:25 +0700
From: "Le Trung Kien" <aloneattack@gmail.com>
To: kerberos@mit.edu
In-Reply-To: <cb25fa940707222058k435be3cbp854962490f29470c@mail.gmail.com>
MIME-Version: 1.0
Content-Disposition: inline
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
## kprop -f /opt/krb5-1.6.1/var/krb5kdc/slave_datatrans slave.ole.abc
#
#kprop: Server rejected authentication (during sendauth exchange) while
authenticating to #server
#kprop: Decrypt integrity check failed signalled from server
#Error text from server: Decrypt integrity check failed
I found that's due to the difference between keytab files on KDC slaves.
Solution of my own (don't know if there are other ways) is to extract keytab
on KDC master for all KDCs then copy keytab file to all KDC slaves.
2007/7/23, Le Trung Kien <aloneattack@gmail.com>:
>
> Thank you for your reply, I have edit /etc/inetd.conf and /etc/services as
> the installation doc
> for using inetd but I still not working by this way.
> Howerver, kpropd has been started successfully with "kpropd -S" in both
> master KDC and slave KDC
>
> Unfortunately, the first problem now turn to :
>
> # kprop -f /opt/krb5-1.6.1/var/krb5kdc/slave_datatrans slave.ole.abc
>
> kprop: Server rejected authentication (during sendauth exchange) while
> authenticating to server
> kprop: Decrypt integrity check failed signalled from server
> Error text from server: Decrypt integrity check failed
>
>
> --
> Le Trung Kien.
--
Le Trung Kien.
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
