Package: libpam-krb5 Version: 4.3-1 Severity: normal
After today's upgrade to testing, my users cannot authenticate against ADS anymore. I'm getting: Apr 17 17:20:40 vpn-gw-int openvpn[11840]: pam_krb5(openvpn-krb5:auth): pam_sm_authenticate: entry (0x0) Apr 17 17:20:40 vpn-gw-int openvpn[11840]: pam_krb5(openvpn-krb5:auth): (user tsteiner) attempting authentication as [email protected] Apr 17 17:20:40 vpn-gw-int openvpn[11840]: pam_krb5(openvpn-krb5:auth): (user tsteiner) credential verification failed: KDC has no support for encryption type Apr 17 17:20:40 vpn-gw-int openvpn[11840]: pam_krb5(openvpn-krb5:auth): authentication failure; logname=tsteiner uid=0 euid=0 tty= ruser= rhost= Apr 17 17:20:40 vpn-gw-int openvpn[11840]: pam_krb5(openvpn-krb5:auth): pam_sm_authenticate: exit (failure) "credential verification failed: KDC has no support for encryption type" # klist -ke /etc/krb5.keytab Keytab name: FILE:/etc/krb5.keytab KVNO Principal ---- -------------------------------------------------------------------------- 1 host/[email protected] (des-cbc-crc) 1 host/[email protected] (des-cbc-crc) 1 openvpn-krb5/[email protected] (des-cbc-crc) 1 host/[email protected] (des-cbc-crc) 1 openvpn-krb5/[email protected] (des-cbc-crc) This used to work with libpam-krb5_4.3-1_i386.deb -- System Information: Debian Release: 6.0.4 APT prefers stable APT policy: (990, 'stable'), (500, 'testing') Architecture: i386 (i686) Kernel: Linux 3.3.0 (SMP w/4 CPU cores) Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968) Shell: /bin/sh linked to /bin/bash Versions of packages libpam-krb5 depends on: ii krb5-config 2.2 Configuration files for Kerberos V ii libc6 2.13-27 Embedded GNU C Library: Shared lib ii libkrb5-3 1.10+dfsg~beta1-2 MIT Kerberos runtime libraries ii libpam-runtime 1.1.1-6.1+squeeze1 Runtime support for the PAM librar ii libpam0g 1.1.1-6.1+squeeze1 Pluggable Authentication Modules l libpam-krb5 recommends no packages. libpam-krb5 suggests no packages. -- no debconf information -- To UNSUBSCRIBE, email to [email protected] with a subject of "unsubscribe". Trouble? Contact [email protected]
