On Wed, 9 Feb 2011 16:13:39 +0000
Brett Maton <mat...@ltresources.co.uk> wrote:

> Hi,
> 
>   I can't get a Windows 7 client to authenticate against Freeipa (ver
> 2.0.0.pre2) running on Fedora 14.
> 
> Feb 09 16:03:22 krb5kdc[32355](info): AS_REQ (7 etypes {18 17 23 3 1
> 24 -135}) 192.168.0.2: NEEDED_PREAUTH: mat...@example.com for
> krbtgt/example....@example.com, Additional pre-authentication
> required Feb 09 16:03:22 krb5kdc[32355](info): preauth (timestamp)
> verify failure: Decrypt integrity check failed Feb 09 16:03:22
> krb5kdc[32355](info): AS_REQ (7 etypes {18 17 23 3 1 24 -135})
> 192.168.0.2: PREAUTH_FAILED: mat...@example.com for
> krbtgt/example....@example.com, Decrypt integrity check failed Feb 09
> 16:03:23 krb5kdc[32355](info): preauth (timestamp) verify failure:
> Decrypt integrity check failed Feb 09 16:03:23 krb5kdc[32355](info):
> AS_REQ (7 etypes {18 17 23 3 1 24 -135}) 192.168.0.2: PREAUTH_FAILED:
> mat...@example.com for krbtgt/example....@example.com, Decrypt
> integrity check failed
> 
> Any help with where to start looking or what might be wrong would be
> greatly appreciated.

Either the password is wrong or the time on your client is not within 5
min. of the time on the KDC.

Simo.

-- 
Simo Sorce * Red Hat, Inc * New York

_______________________________________________
Freeipa-users mailing list
Freeipa-users@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-users

Reply via email to