[36034] in Kerberos
Re: Help setting up PKINIT
daemon@ATHENA.MIT.EDU (Greg Hudson)
Mon Apr 14 11:02:22 2014
Message-ID: <534BF86F.5090603@mit.edu>
Date: Mon, 14 Apr 2014 11:02:07 -0400
From: Greg Hudson <ghudson@mit.edu>
MIME-Version: 1.0
To: "Nordgren, Bryce L -FS" <bnordgren@fs.fed.us>,
"kerberos@mit.edu" <kerberos@mit.edu>
In-Reply-To: <82E7C9A01FD0764CACDD35D10F5DFB6E6A8D2E@001FSN2MPN1-045.001f.mgd2.msft.net>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
On 04/13/2014 09:40 PM, Nordgren, Bryce L -FS wrote:
> It now looks to me like the KDC returns a ticket, but kinit still asks for a password.
It sounds like the client is failing to process the KDC response padata,
and therefore thinks that the password is required to compute the reply
key. If you run kinit with the KRB5_TRACE environment variable set to a
filename (or to /dev/stdout), you may be able to collect more
information on why it is failing.
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
