[24636] in Kerberos

home help back first fref pref prev next nref lref last post

Decrypt integrity check failed while changing password

daemon@ATHENA.MIT.EDU (Brian Davidson)
Wed Sep 14 13:04:26 2005

Date: Wed, 14 Sep 2005 13:03:31 -0400
From: Brian Davidson <bdavids1@gmu.edu>
To: kerberos@mit.edu
Message-id: <2ddbea3345c73fb5dc4235e5ad27d973@gmu.edu>
MIME-version: 1.0
Content-type: text/plain; charset=US-ASCII; format=flowed
Content-transfer-encoding: 7BIT
Errors-To: kerberos-bounces@mit.edu

I had to do a bunch of account cleanups (~35,000 deletions) yesterday.  
Today, I'm getting the message 'change_password: Decrypt integrity 
check failed while changing password for "principal@GMU.EDU"' when 
trying to change a password.  If I create a new principal, I am able to 
change it's password.  I'm using kadmin.local -- we don't run kadmind.

Anyone have an idea what I deleted that I shouldn't have?

I didn't delete K/M, or host/*.  I did delete krbtgt/* and kadmin/*, 
but I wanted to re-key those anyways (that's my story, and I'm sticking 
to it).  I'd clearly like to avoid doing this again in the future...

Thanks,

Brian Davidson
George Mason University

________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

home help back first fref pref prev next nref lref last post