[36393] in Kerberos

home help back first fref pref prev next nref lref last post

Re: client not responding to KDC_ERR_PREAUTH_REQUIRED

daemon@ATHENA.MIT.EDU (Greg Hudson)
Mon Aug 18 13:58:50 2014

Message-ID: <53F23DFE.1080503@mit.edu>
Date: Mon, 18 Aug 2014 13:55:10 -0400
From: Greg Hudson <ghudson@mit.edu>
MIME-Version: 1.0
To: Ben H <bhendin@gmail.com>, Kerberos@mit.edu
In-Reply-To: <CAAd7auYN_rmAG2mPQgS0mSEuL9hOd4LYMUc55YGxWS3nQ6Fn7A@mail.gmail.com>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu

On 08/18/2014 12:56 PM, Ben H wrote:
> We have an application that is experiencing some issues when tickets expire.

What Kerberos implementation and version, and on what platform?

Are you getting tickets with a password or with a keytab?  If you are
using a password, is it possible that the client is sometimes unable to
produce the password?  That would cause the client to give up after
receiving preauth-required.

You describe packet trace information, but later talk about "additional
errors."  Are you able to correlate the packet trace with an error code
from krb5_get_init_creds_password or similar?
________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

home help back first fref pref prev next nref lref last post