[29257] in Kerberos

home help back first fref pref prev next nref lref last post

Re: Kerberos V5 refuses authentication because Kerberos checksum

daemon@ATHENA.MIT.EDU (Steven Miller)
Thu Feb 14 09:52:11 2008

Date: Thu, 14 Feb 2008 06:50:49 -0800 (PST)
From: Steven Miller <stevenraymillerjr@yahoo.com>
To: Victor Sudakov <vas@mpeks.no-spam-here.tomsk.su>, kerberos@mit.edu
In-Reply-To: <fp0q83$1ps7$1@relay.tomsk.ru>
MIME-Version: 1.0
Message-ID: <95206.39143.qm@web38508.mail.mud.yahoo.com>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu

I believe that solaris (as as solaris 9) only supports
des-cbc-crc encrypion. 

Hope that helps,

Steven

--- Victor Sudakov <vas@mpeks.no-spam-here.tomsk.su>
wrote:

> Colleagues,
> 
> What could be the reason that I cannot telnet from
> FreeBSD to Solaris 10
> with the following error:
> 
> Connected to oracle.sibptus.tomsk.ru.
> Escape character is '^]'.
> [ Trying mutual KERBEROS5
> (host/oracle.sibptus.tomsk.ru@SIBPTUS.TOMSK.RU)... ]
> [ Kerberos V5 refuses authentication because
> Kerberos checksum verification failed: Bad
> encryption type ]
> [ Trying KERBEROS5
> (host/oracle.sibptus.tomsk.ru@SIBPTUS.TOMSK.RU)... ]
> [ Kerberos V5 refuses authentication because
> Kerberos checksum verification failed: Bad
> encryption type ]
> Password:
> 
> Kerberized telnet and ssh work fine between FreeBSD
> systems, but
> Solaris is a problem.
> 
> The kdc is Heimdal running on FreeBSD. The keytab
> for the host
> principal was exported on FreeBSD and then
> transferred to Solaris and
> imported there.
> 
> Thank you in advance for any input.
> 
> -- 
> Victor Sudakov,  VAS4-RIPE, VAS47-RIPN
> 2:5005/49@fidonet http://vas.tomsk.ru/
> ________________________________________________
> Kerberos mailing list           Kerberos@mit.edu
> https://mailman.mit.edu/mailman/listinfo/kerberos
> 



      ____________________________________________________________________________________
Be a better friend, newshound, and 
know-it-all with Yahoo! Mobile.  Try it now.  http://mobile.yahoo.com/;_ylt=Ahu06i62sR8HDtDypao8Wcj9tAcJ 

________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

home help back first fref pref prev next nref lref last post