[31560] in Kerberos
preauth (timestamp) verify failure: Decrypt integrity check failed
daemon@ATHENA.MIT.EDU (Jaap Winius)
Thu Oct 8 12:10:46 2009
From: Jaap Winius <jwinius@umrk.nl>
MIME-Version: 1.0
Date: 08 Oct 2009 12:42:29 GMT
Message-ID: <4acdde35$0$12392$e4fe514c@dreader12.news.xs4all.nl>
To: kerberos@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
Hi all,
Oct 08 16:09:14 bungarus krb5kdc[1710](info): preauth (timestamp) verify
failure: Decrypt integrity check failed
Oct 08 16:09:14 bungarus krb5kdc[1710](info): AS_REQ (7 etypes {18 17 16
23 1 3 2}) 192.168.2.41: PREAUTH_FAILED: jjones@UMRK.NL for krbtgt/
UMRK.NL@UMRK.NL, Decrypt integrity check failed
This is an error that I can't seem to figure out. I'm trying to use SSH
to log into a Debian lenny system that uses MIT Kerberos V v1.6 and
OpenLDAP v2.4.11. The lab host, bungarus, has both the server and client
software installed. It was working for a while, but now this.
I've been following this howto:
http://www.debian-administration.org/articles/570
My PAM configuration is exactly the same.
It can't be a timesync problem, because I'm using only a single host. The
strange thing is, I can log in with user jjones as soon as I make a
matching unix account on the host: then I can log in with either the unix
password or the Kerberos password. But, as soon as I get rid of the unix
account, the above error returns.
Any ideas?
Thanks,
Jaap
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
