[8114] in Release_7.7_team
Re: locked out of my debathena workstation
daemon@ATHENA.MIT.EDU (Jonathan D Reed)
Sat Mar 14 15:46:19 2015
From: Jonathan D Reed <jdreed@mit.edu>
To: Alexander Chernyakhovsky <achernya@mit.edu>
CC: Alex T Prengel <alexp@mit.edu>,
"release-team@mit.edu"
<release-team@mit.edu>
Date: Sat, 14 Mar 2015 19:46:07 +0000
Message-ID: <BFA5019F-6418-4646-A319-A07DC504FB71@mit.edu>
In-Reply-To: <CAB18ysrmnsR0ZXM62RcBpyn5ueiTWivtJw-LE+s71FRadc6rbA@mail.gmail.com>
Content-Language: en-US
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
Alex asked me about this on Friday, I checked his principal and it had rc4 and 3des but not DES. And it's not a cluster machine so it shouldn't be reactivate. Could be a one-off but I was hoping someone could verify other beta workstations (specifically, -workstation )were not affected. I'm out of town and can't test.
Sent from my mobile device
> On Mar 14, 2015, at 12:35 PM, "Alex Chernyakhovsky" <achernya@mit.edu> wrote:
>
> Hi,
>
> On Friday, Ben Kaduk moved a new copy of kerberos-config to proposed.
> I believe that will affect the beta workstations; the notable change
> is that allow_weak_crypto got turned off. Is your Athena password by
> any chance still using DES-only? That would explain these symptoms.
>
> Sincerely,
> -Alex
>
>> On Sat, Mar 14, 2015 at 11:25 AM, Alex T Prengel <alexp@mit.edu> wrote:
>> Hi,
>>
>> I'm suddenly unable to log into my desktop machine (dit.mit.edu), debathena
>> workstation running Precise, since yesterday afternoon. I get
>> "authentication failure" on a graphical login attempt, a ctrl-alt-f1
>> terminal login attempt, and ssh attempts from other machines. I'm able to
>> log into other Athena machines, both locally and by ssh without problems.
>> I'm not sure if or when an update might have triggered this as I was logged
>> into the machine continuously since last Monday.
>>
>> Has anyone else seen this on beta workstations?
>>
>>
>> Alex
