[33755] in Kerberos
Help: Decrypt integrity check failed error in Apache
daemon@ATHENA.MIT.EDU (Lee Eric)
Thu Aug 11 05:08:24 2011
MIME-Version: 1.0
Date: Thu, 11 Aug 2011 17:08:11 +0800
Message-ID: <CAOJJ1ZpFCYOgOiNoev_x1OHqmcxTY9=_P0v0gA8=BdZo3nOF6Q@mail.gmail.com>
From: Lee Eric <openlinuxsource@gmail.com>
To: kerberos@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
Hi,
I encountered following error from /var/log/httpd/error.log as I type
username and password.
Aug 10 21:45:38 service.herdingcat.internal krb5kdc[19684](info):
AS_REQ (7 etypes {18 17 16 23 1 3 2}) 192.168.122.2: NEEDED_PREAUTH:
huli@HERDINGCAT.INTERNAL for
krbtgt/HERDINGCAT.INTERNAL@HERDINGCAT.INTERNAL, Additional
pre-authentication required
Aug 10 21:45:38 service.herdingcat.internal krb5kdc[19684](info):
preauth (timestamp) verify failure: Decrypt integrity check failed
Aug 10 21:45:38 service.herdingcat.internal krb5kdc[19684](info):
AS_REQ (7 etypes {18 17 16 23 1 3 2}) 192.168.122.2: PREAUTH_FAILED:
huli@HERDINGCAT.INTERNAL for
krbtgt/HERDINGCAT.INTERNAL@HERDINGCAT.INTERNAL, Decrypt integrity
check failed
Here's the configuration for mod_auth_kerb module.
LoadModule auth_kerb_module modules/mod_auth_kerb.so
<Location />
SSLRequireSSL
AuthType Kerberos
AuthName "Kerberos Login"
KrbMethodNegotiate On
KrbMethodK5Passwd On
KrbAuthRealms HERDINGCAT.INTERNAL
Krb5KeyTab /etc/krb5.keytab
require valid-user
</Location>
Can anyone show me how to fix that?
Thanks.
Eric Lee
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
