[30412] in Kerberos
Re: Identified does not match issue
daemon@ATHENA.MIT.EDU (vssureka@gmail.com)
Tue Nov 4 13:12:25 2008
From: vssureka@gmail.com
Date: Tue, 4 Nov 2008 09:14:03 -0800 (PST)
Message-ID: <fa50c333-2411-4af7-9e53-56ce2214cf88@i24g2000prf.googlegroups.com>
Mime-Version: 1.0
X-Complaints-To: groups-abuse@google.com
Complaints-To: groups-abuse@google.com
To: kerberos@mit.edu
Content-Type: text/plain; charset="iso-8859-1"
Errors-To: kerberos-bounces@mit.edu
Content-Transfer-Encoding: 8bit
I have checked and double checked the issue with password and
everything looks right. The time is also synchronized.
Here is some more information that I found last night
If I run "kinit JBOSS <<password>>" - it works fine and it gets the
Ticket without any errors
But when I use the keytab that I generate using ktab utility "ktab -k -
t FILE:c:\myfile.keytab -a JBOSS <<password>>" and then pass on this
file to kinit utility using
"kinit -k -t FILE:c:\myfile.ketyab JBOSS" I get the preauthenticatin
error. Seems like the Ktab is generating a keytab file that is meshing
up the password.
Given that the first command succeeds tells me that the use is setup
correctly on the AD side. (I further verified that by passing in a
wrong password in "kinit JBOSS <<password>>" and as expected it
fails telling me that it does verifies the password as it is expected)
Any help would be highly appreciated
vs
On Nov 4, 5:20 am, anil.shashikumar.be...@gmail.com wrote:
> > C:\Program Files\Java\jdk1.5.0_16\bin>kinit -k -tc:\JBOSS.host.keytab
>
> > JBOSS
>
> > Exception: krb_error 24 Pre-authentication information was invalid
>
> This could be because the password/keytab or the principal name you
> provided you have provided may not be incorrect .
>
> Also you could check if there is any large clock skew time difference on
> your AD box and the client.
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
