[38118] in Kerberos
Decrypt integrity check failed
daemon@ATHENA.MIT.EDU (vishal)
Mon Nov 13 17:01:09 2017
MIME-Version: 1.0
From: vishal <vicky.recw@gmail.com>
Date: Mon, 13 Nov 2017 14:00:51 -0800
Message-ID: <CAG-wCMtASWTeggObY4VtGfgx7NOWjsd7vnik5CL7QswzQMShGw@mail.gmail.com>
To: kerberos@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
Hi,
In AS_REP I see that domain controller is sending the enc type as etype:
eTYPE-AES256-CTS-HMAC-SHA1-96 (18)
however in TGS_REP it is sending as etype: eTYPE-ARCFOUR-HMAC-MD5 (23),
This is causing the " Decrypt integrity check failed" error. Any reason why
domain controller will behave like it?
--Vishal
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
