[30005] in Kerberos

home help back first fref pref prev next nref lref last post

pre-authentication

daemon@ATHENA.MIT.EDU (naveen.bn)
Tue Jun 24 01:16:57 2008

Message-ID: <486082D9.7040304@globaledgesoft.com>
Date: Tue, 24 Jun 2008 10:45:05 +0530
From: "naveen.bn" <naveen.bn@globaledgesoft.com>
MIME-Version: 1.0
To: kevin <kwc@umich.edu>
Cc: kerberos@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu

Hi Kevin,

Guide on this , When i use require_preauth for the client and try to send the AS_REQ with 
pa-data using the command  

kinit -X X509_user_identity=FILE:/client/test.pem,/client/test.key naveen

The first AS_REQ will go with out pa-data to the KDC, the kdc will replay with KRB5KDC_ERR_PREAUTH_REQUIRED (25)  
and the second AS_REQ  will go from the client to the KDC with pa-data filled and i get a AS_REP back from kdc
with the ticket.
Please help me in finding the reason behind AS_REQ going twice from the client.

Thank you 

with regards
naveen

________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

home help back first fref pref prev next nref lref last post