Hi,

I encountered following error from /var/log/httpd/error.log as I type
username and password.

Aug 10 21:45:38 service.herdingcat.internal krb5kdc[19684](info):
AS_REQ (7 etypes {18 17 16 23 1 3 2}) 192.168.122.2: NEEDED_PREAUTH:
[email protected] for
krbtgt/[email protected], Additional
pre-authentication required
Aug 10 21:45:38 service.herdingcat.internal krb5kdc[19684](info):
preauth (timestamp) verify failure: Decrypt integrity check failed
Aug 10 21:45:38 service.herdingcat.internal krb5kdc[19684](info):
AS_REQ (7 etypes {18 17 16 23 1 3 2}) 192.168.122.2: PREAUTH_FAILED:
[email protected] for
krbtgt/[email protected], Decrypt integrity
check failed

Here's the configuration for mod_auth_kerb module.

LoadModule auth_kerb_module modules/mod_auth_kerb.so

<Location />
  SSLRequireSSL
  AuthType Kerberos
  AuthName "Kerberos Login"
  KrbMethodNegotiate On
  KrbMethodK5Passwd On
  KrbAuthRealms HERDINGCAT.INTERNAL
  Krb5KeyTab /etc/krb5.keytab
  require valid-user
</Location>

Can anyone show me how to fix that?

Thanks.

Eric Lee
________________________________________________
Kerberos mailing list           [email protected]
https://mailman.mit.edu/mailman/listinfo/kerberos

Reply via email to