>Oct 29 12:58:13 silmaril krb5kdc[13245](info): AS_REQ (7 etypes {18 17
>16 23 1 3 2}) xxx.xx.11.213: DECRYPT_CLIENT_KEY: [EMAIL PROTECTED] for
>krbtgt/[EMAIL PROTECTED], Decrypt integrity check failed

One little thing I always forget about afs2k5db .... it currently only
works if your master key is single-DES (in theory this isn't hard to fix,
but see previous comments about time, interest, etc etc).  Judging by
this error, the client keys are not encrypted properly in the database.
I am guessing that your K/M principal is something other than single-DES.

--Ken
_______________________________________________
OpenAFS-info mailing list
[email protected]
https://lists.openafs.org/mailman/listinfo/openafs-info

Reply via email to