[37201] in Kerberos

home help back first fref pref prev next nref lref last post

Heimdahl Kerberos on MacOSX 10.9.5 using pkinit produces verify error

daemon@ATHENA.MIT.EDU (Glenn Machin)
Sun Aug 23 09:51:32 2015

To: <kerberos@mit.edu>
From: Glenn Machin <gmachin@sandia.gov>
Message-ID: <55D9CFC5.40309@sandia.gov>
Date: Sun, 23 Aug 2015 07:51:01 -0600
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu


The MIT KDC version is 1-10-3

When I perform a kinit on MacOSX 10.9.5 (Maverick)

    kinit -C KEYCHAIN -D KEYCHAIN:


It produces the following error on the KDC:

Aug 22 19:23:35 as36snllx krb5kdc[25098]: preauth (pkinit) verify 
failure: error:0D08303A:asn1 encoding 
routines:ASN1_TEMPLATE_NOEXP_D2I:nested asn1 error
Aug 22 19:23:35 as36snllx krb5kdc[25098]: AS_REQ (7 etypes {18 17 16 23 
3 2 1}) 134.253.253.38: PREAUTH_FAILED: gmachin@dce.sandia.gov for 
krbtgt/dce.sandia.gov@dce.sandia.gov, error:0D08303A:asn1 encoding 
routines:ASN1_TEMPLATE_NOEXP_D2I:nested asn1 error


Is this a known problem?

Any help would be appreciated?


Glenn
________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

home help back first fref pref prev next nref lref last post