[33325] in Kerberos

home help back first fref pref prev next nref lref last post

Re: krb5_get_init_creds_password: Decrypt integrity check failed

daemon@ATHENA.MIT.EDU (Russ Allbery)
Mon Apr 11 21:01:53 2011

From: Russ Allbery <rra@stanford.edu>
To: "kerberos\@mit.edu" <kerberos@mit.edu>
In-Reply-To: <1302554739.10465.610.camel@t410> (Greg Hudson's message of "Mon, 
	11 Apr 2011 16:45:39 -0400")
Date: Mon, 11 Apr 2011 18:01:47 -0700
Message-ID: <87vcykl1tw.fsf@windlord.stanford.edu>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu

Greg Hudson <ghudson@MIT.EDU> writes:

> There is one thing pam_krb5 could do to help debug problems like this,
> which is provide an option to turn on krb5 tracing if
> krb5_set_trace_filename() is available (MIT krb5 1.9 or later).  Since
> pam_krb5 creates a secure context, the KRB5_TRACE environment variable
> doesn't operate.

Thanks, added to my TODO list.

-- 
Russ Allbery (rra@stanford.edu)             <http://www.eyrie.org/~eagle/>
________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

home help back first fref pref prev next nref lref last post