[39526] in Kerberos
[validate_tgt] (0x0020): [RID#988] TGT failed verification using
daemon@ATHENA.MIT.EDU (Marco Moock)
Mon Jun 23 12:42:35 2025
Date: Fri, 20 Jun 2025 17:44:23 +0200
From: Marco Moock <mm@dorfdsl.de>
To: kerberos@mit.edu
Message-ID: <20250618093205.1f6da8ef@rlcp-nb-5642.prosis.group>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
Hello!
I want to attach a Fedora 42 system to MS AD. sssd seems to work as I
can retrieve user info from AD. Although, login on my system fails and
I get the following message in /var/log/sssd/krb5_child.log:
* (2025-06-18 8:02:33): [krb5_child[137885]] [validate_tgt]
(0x0020): [RID#988] TGT failed verification using key for
[redacted HOSTNAME]. ********************** BACKTRACE DUMP ENDS
HERE *********************************
(2025-06-18 8:02:33): [krb5_child[137885]] [get_and_save_tgt]
(0x0020): [RID#988] 2359: [-1765328339][Service key not available]
(2025-06-18 8:02:33): [krb5_child[137885]] [map_krb5_error] (0x0040):
[RID#988] 2443: [-1765328339][Service key not available]
********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING
BACKTRACE:
* (2025-06-18 8:02:33): [krb5_child[137885]] [get_and_save_tgt]
(0x0020): [RID#988] 2359: [-1765328339][Service key not available]
* (2025-06-18 8:02:33): [krb5_child[137885]] [map_krb5_error]
(0x0040): [RID#988] 2443: [-1765328339][Service key not available]
********************** BACKTRACE DUMP ENDS HERE
*********************************
Can someone give a hint were to look for the problem?
--
kind regards
Marco
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
