[38640] in Kerberos
Decrypt integrity check failed while getting initial ticket
daemon@ATHENA.MIT.EDU (Stephen Carville (Kerberos List))
Mon Dec 9 13:05:08 2019
To: <kerberos@mit.edu>
From: "Stephen Carville (Kerberos List)" <b44261a2@opayq.com>
Message-ID: <ed3b1f90-bd01-2797-43ae-1215395aeff3@opayq.com>
Date: Mon, 9 Dec 2019 10:04:17 -0800
MIME-Version: 1.0
Content-Language: en-US
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
Recently I migrated the kerberos master and one slave to another
location using tool called "Zerto". Perhaps coincidentally, replication
broke with the above error message. I checked that DNS A and PTR records
for all the servers are correct. I can get a ticket using kinit (kinit
-k host/<hostname>). I finally recreated the keytab file
(/etc/krb5.keytab) and propagated it to the other three servers. Still
no replication.
Any suggestions?
BTW, while trying to fix it, I noticed that every time I use ktadd to
add a key to krb5.keytab the KVNO increments. Is that normal?
--
Stephen
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
