[38163] in Kerberos
freeipa and kerberos failures
daemon@ATHENA.MIT.EDU (lejeczek)
Wed Jan 10 11:03:56 2018
To: kerberos@mit.edu
From: lejeczek <peljasz@yahoo.co.uk>
Message-ID: <f9f6c16f-8f92-f84c-a848-72cfd8c5e115@yahoo.co.uk>
Date: Wed, 10 Jan 2018 16:03:15 +0000
MIME-Version: 1.0
Content-Language: en-GB
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
hi everyone
I'm trying freeIPA, trying to install a client and process
fails. On the freeIPA kerberos end:
16 23 25 26}) 10.5.6.17: NEEDED_PREAUTH:
host/dzien.priv.xx.xx.priv.xx.xx.x@PRIVATE.xx.xx.PRIVATE.xx.xx.x
for
krbtgt/PRIVATE.xx.xx.PRIVATE.xx.xx.x@PRIVATE.xx.xx.PRIVATE.xx.xx.x,
Additional pre-authentication required
Jan 10 15:11:50 swir.priv.xx.xx.priv.xx.xx.x
krb5kdc[606061](info): closing down fd 11
Jan 10 15:11:50 swir.priv.xx.xx.priv.xx.xx.x
krb5kdc[606061](info): preauth (encrypted_timestamp) verify
failure: Preauthentication failed
Jan 10 15:11:50 swir.priv.xx.xx.priv.xx.xx.x
krb5kdc[606061](info): AS_REQ (8 etypes {18 17 20 19 16 23
25 26}) 10.5.6.17: PREAUTH_FAILED:
host/dzien.priv.xx.xx.priv.xx.xx.x@PRIVATE.xx.xx.PRIVATE.xx.xx.x
for
krbtgt/PRIVATE.xx.xx.PRIVATE.xx.xx.x@PRIVATE.xx.xx.PRIVATE.xx.xx.x,
Preauthentication failed
Jan 10 15:11:50 swir.priv.xx.xx.priv.xx.xx.x
krb5kdc[606061](info): closing down fd 11
Jan 10 15:11:50 swir.priv.xx.xx.priv.xx.xx.x
krb5kdc[606061](info): AS_REQ (8 etypes {18 17 20 19 16 23
25 26}) 10.5.6.17: NEEDED_PREAUTH:
host/dzien.priv.xx.xx.priv.xx.xx.x@PRIVATE.xx.xx.PRIVATE.xx.xx.x
for
krbtgt/PRIVATE.xx.xx.PRIVATE.xx.xx.x@PRIVATE.xx.xx.PRIVATE.xx.xx.x,
Additional pre-authentication required
Jan 10 15:11:50 swir.priv.xx.xx.priv.xx.xx.x
krb5kdc[606061](info): closing down fd 11
Jan 10 15:11:50 swir.priv.xx.xx.priv.xx.xx.x
krb5kdc[606060](info): preauth (encrypted_timestamp) verify
failure: Preauthentication failed
Jan 10 15:11:50 swir.priv.xx.xx.priv.xx.xx.x
krb5kdc[606060](info): AS_REQ (8 etypes {18 17 20 19 16 23
25 26}) 10.5.6.17: PREAUTH_FAILED:
host/dzien.priv.xx.xx.priv.xx.xx.x@PRIVATE.xx.xx.PRIVATE.xx.xx.x
for
krbtgt/PRIVATE.xx.xx.PRIVATE.xx.xx.x@PRIVATE.xx.xx.PRIVATE.xx.xx.x,
Preauthentication failed
Jan 10 15:11:50 swir.priv.xx.xx.priv.xx.xx.x
krb5kdc[606060](info): closing down fd 11
I make sure both server's and clients time is synced.
I'm on centos 7.4 with krb5-libs-1.15.1-8.el7.x86_64
Would somebody be keen to shed more light on as what might
be the problem?
many thanks, L.
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
