[17138] in Kerberos_V5_Development
Kerberos & AD Setup Issue
daemon@ATHENA.MIT.EDU (Ranjith Murugan)
Mon Sep 5 07:07:35 2011
From: "Ranjith Murugan" <muruganr@vmware.com>
To: <krbdev@mit.edu>
Date: Mon, 5 Sep 2011 04:07:31 -0700 (PDT)
Message-ID: <08a901cc6bbc$014d2b40$03e781c0$@com>
MIME-Version: 1.0
Content-Language: en-us
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krbdev-bounces@mit.edu
Hi all
I have been trying to setup an Kerberos and Active Directory setup, Seeing
the same issue you have mentioned in you post (Preauth and ticket
forwarding). I am currently not able to login to a windows machine using a
kerberos user. The Kerberos Server logs show a error [NEEDED_PREAUTH:
admin@QA12.INT for krbtgt/QA12.INT@QA12.INT, Additional pre-authentication
required].
Error from the kerberos server:
Aug 23 12:19:33 lhr-qa12 krb5kdc[4712](info): AS_REQ (7 etypes {23 -133
-128 3 1 24 -135}) 10.20.221.180: NEEDED_PREAUTH: admin@QA12.INT for
krbtgt/QA12.INT@QA12.INT, Additional pre-authentication required
Aug 23 12:19:33 lhr-qa12 krb5kdc[4712](info): AS_REQ (2 etypes {3 1})
10.20.221.180: ISSUE: authtime 1314098373, etypes {rep=3 tkt=1 ses=1},
admin@QA12.INT for krbtgt/QA12.INT@QA12.INT
Aug 23 12:19:33 lhr-qa12 krb5kdc[4712](info): TGS_REQ (7 etypes {23 -133
-128 3 1 24 -135}) 10.20.221.180: ISSUE: authtime 1314098373, etypes
{rep=1 tkt=1 ses=1}, admin@QA12.INT for krbtgt/QA10.INT@QA12.INT
Aug 23 12:19:33 lhr-qa12 krb5kdc[4712](info): TGS_REQ (7 etypes {23 -133
-128 3 1 24 -135}) 10.20.221.180: ISSUE: authtime 1314098373, etypes
{rep=1 tkt=16 ses=1}, admin@QA12.INT for host/dmtest.qa10.int@QA12.INT
Environment:
- Kerberos Server(Ubuntu 10.10)
- AD - Windows 2003 R2
Could you please let me know if you have solved the problem you have
mentioned in "Preauth and ticket forwarding"?
Regards,
Ranjith.
_______________________________________________
krbdev mailing list krbdev@mit.edu
https://mailman.mit.edu/mailman/listinfo/krbdev
