[31826] in Kerberos
Re: Wrong principal in request
daemon@ATHENA.MIT.EDU (Russ Allbery)
Wed Dec 30 15:44:44 2009
From: Russ Allbery <rra@stanford.edu>
To: kerberos@mit.edu
In-Reply-To: <4B3B9CEA.6000904@kickflop.net> (Jeff Blaine's message of "Wed,
30 Dec 2009 13:33:14 -0500")
Date: Wed, 30 Dec 2009 12:44:15 -0800
Message-ID: <878wckb3a8.fsf@windlord.stanford.edu>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
Jeff Blaine <jblaine@kickflop.net> writes:
> Server: CentOS 5.3, MIT Kerberos 1.6.x, Russ Alberry's pam_krb5
> Failure: Aside from GSSAPI not being used...
> sshd[12234]: pam_krb5RA(sshd:auth): pam_sm_authenticate: entry (0x1)
> sshd[12234]: pam_krb5RA(sshd:auth): (user jblaine) attempting
> authentication as jblaine@FOO
> sshd[12234]: pam_krb5RA(sshd:auth): (user jblaine) credential
> verification failed: Wrong principal in request
Usually this means the principal in the system keytab for your system
doesn't agree with the hostname or DNS name of the system.
--
Russ Allbery (rra@stanford.edu) <http://www.eyrie.org/~eagle/>
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
