Re: [Freeipa-users] NEEDED_PREAUTH: Additional pre-authentication required - User can't access any centos server

2016-04-18 Thread Sumit Bose 
On Mon, Apr 18, 2016 at 03:08:28PM +, Gady Notrica wrote:
> Hi guys,
> 
> >From the ipa server, I am having issue with the single user. Everyone else 
> >is fine, just this one single user and no help anywhere online.
> 
> Please help!
> 
> Thank you
> 
> Apr 15 15:43:36 ipa.domain.com krb5kdc[2568](info): AS_REQ (6 etypes {18 17 
> 16 23 25 26}) 172.20.10.40: NEEDED_PREAUTH: bcos...@ipa.domain.com for 
> krbtgt/ipa.domain@ipa.domain.com, Additional pre-authentication required

NEEDED_PREAUTH is expected

> Apr 15 15:43:36 ipa.domain.com krb5kdc[2568](info): closing down fd 12
> Apr 15 15:43:41 ipa.domain.com krb5kdc[2565](info): preauth 
> (encrypted_timestamp) verify failure: Decrypt integrity check failed

This indicates a wrong password.

HTH

bye,
Sumit

> Apr 15 15:43:41 ipa.domain.com krb5kdc[2565](info): AS_REQ (6 etypes {18 17 
> 16 23 25 26}) 172.20.10.40: PREAUTH_FAILED: bcos...@ipa.domain.com for 
> krbtgt/ipa.domain@ipa.domain.com, Decrypt integrity check failed
> Apr 15 15:43:41 ipa.domain.com krb5kdc[2565](info): closing down fd 12
> Apr 15 15:43:49 ipa.domain.com krb5kdc[2568](info): AS_REQ (6 etypes {18 17 
> 16 23 25 26}) 172.20.10.40: NEEDED_PREAUTH: bcos...@ipa.domain.com for 
> krbtgt/ipa.domain@ipa.domain.com, Additional pre-authentication required
> Apr 15 15:43:49 ipa.domain.com krb5kdc[2568](info): closing down fd 12
> Apr 15 15:43:55 ipa.domain.com krb5kdc[2565](info): preauth 
> (encrypted_timestamp) verify failure: Decrypt integrity check failed
> Apr 15 15:43:55 ipa.domain.com krb5kdc[2565](info): AS_REQ (6 etypes {18 17 
> 16 23 25 26}) 172.20.10.40: PREAUTH_FAILED: bcos...@ipa.domain.com for 
> krbtgt/ipa.domain@ipa.domain.com, Decrypt integrity check failed
> 
> Gady Notrica | IT Systems Analyst | 416.814.7800 Ext. 7921 | Cell. 
> 416.818.4797 | gnotr...@candeal.com
> CanDeal | 152 King St. E, 4th Floor, Toronto ON M5A 1J4 | 
> www.candeal.com | Follow us: [Description: 
> Description: cid:image003.jpg@01CBD419.622CDF90] 
>    [Description: Description: Description: 
> cid:image002.jpg@01CBD419.622CDF90] 
> 
> 




> -- 
> Manage your subscription for the Freeipa-users mailing list:
> https://www.redhat.com/mailman/listinfo/freeipa-users
> Go to http://freeipa.org for more info on the project

-- 
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go to http://freeipa.org for more info on the project

Re: [Freeipa-users] NEEDED_PREAUTH: Additional pre-authentication required - User can't access any centos server

2016-04-18 Thread Gady Notrica 
Hi Rob,

Thanks for the reply. I did reset the user password multiple times to a simple 
password, still having same issue.

Gady

-Original Message-
From: Rob Crittenden [mailto:rcrit...@redhat.com] 
Sent: April 18, 2016 2:25 PM
To: Gady Notrica; freeipa-users@redhat.com
Subject: Re: [Freeipa-users] NEEDED_PREAUTH: Additional pre-authentication 
required - User can't access any centos server

Gady Notrica wrote:
> Hi guys,
>
>  From the ipa server, I am having issue with the single user. Everyone 
> else is fine, just this one single user and no help anywhere online.
>
> Please help!

Decrypt integrity check failed almost always means bad password.

rob

>
> Thank you
>
> Apr 15 15:43:36 ipa.domain.com krb5kdc[2568](info): AS_REQ (6 etypes 
> {18
> 17 16 23 25 26}) 172.20.10.40: *NEEDED_PREAUTH*: 
> bcos...@ipa.domain.com for krbtgt/ipa.domain@ipa.domain.com, 
> *Additional pre-authentication
> required*
>
> Apr 15 15:43:36 ipa.domain.com krb5kdc[2568](info): closing down fd 12
>
> Apr 15 15:43:41 ipa.domain.com krb5kdc[2565](info): preauth
> (encrypted_timestamp) verify failure: *Decrypt integrity check failed*
>
> Apr 15 15:43:41 ipa.domain.com krb5kdc[2565](info): AS_REQ (6 etypes 
> {18
> 17 16 23 25 26}) 172.20.10.40: *PREAUTH_FAILED*: 
> bcos...@ipa.domain.com for krbtgt/ipa.domain@ipa.domain.com, 
> Decrypt integrity check failed
>
> Apr 15 15:43:41 ipa.domain.com krb5kdc[2565](info): closing down fd 12
>
> Apr 15 15:43:49 ipa.domain.com krb5kdc[2568](info): AS_REQ (6 etypes 
> {18
> 17 16 23 25 26}) 172.20.10.40: *NEEDED_PREAUTH*: 
> bcos...@ipa.domain.com for krbtgt/ipa.domain@ipa.domain.com, 
> *Additional pre-authentication
> required*
>
> Apr 15 15:43:49 ipa.domain.com krb5kdc[2568](info): closing down fd 12
>
> Apr 15 15:43:55 ipa.domain.com krb5kdc[2565](info): preauth
> (encrypted_timestamp) verify failure: *Decrypt integrity check failed*
>
> Apr 15 15:43:55 ipa.domain.com krb5kdc[2565](info): AS_REQ (6 etypes 
> {18
> 17 16 23 25 26}) 172.20.10.40: *PREAUTH_FAILED*: 
> bcos...@ipa.domain.com for krbtgt/ipa.domain@ipa.domain.com, 
> Decrypt integrity check failed
>
>
>
>


-- 
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go to http://freeipa.org for more info on the project

Re: [Freeipa-users] NEEDED_PREAUTH: Additional pre-authentication required - User can't access any centos server

2016-04-18 Thread Rob Crittenden 

Gady Notrica wrote:

Hi guys,

 From the ipa server, I am having issue with the single user. Everyone
else is fine, just this one single user and no help anywhere online.

Please help!


Decrypt integrity check failed almost always means bad password.

rob



Thank you

Apr 15 15:43:36 ipa.domain.com krb5kdc[2568](info): AS_REQ (6 etypes {18
17 16 23 25 26}) 172.20.10.40: *NEEDED_PREAUTH*: bcos...@ipa.domain.com
for krbtgt/ipa.domain@ipa.domain.com, *Additional pre-authentication
required*

Apr 15 15:43:36 ipa.domain.com krb5kdc[2568](info): closing down fd 12

Apr 15 15:43:41 ipa.domain.com krb5kdc[2565](info): preauth
(encrypted_timestamp) verify failure: *Decrypt integrity check failed*

Apr 15 15:43:41 ipa.domain.com krb5kdc[2565](info): AS_REQ (6 etypes {18
17 16 23 25 26}) 172.20.10.40: *PREAUTH_FAILED*: bcos...@ipa.domain.com
for krbtgt/ipa.domain@ipa.domain.com, Decrypt integrity check failed

Apr 15 15:43:41 ipa.domain.com krb5kdc[2565](info): closing down fd 12

Apr 15 15:43:49 ipa.domain.com krb5kdc[2568](info): AS_REQ (6 etypes {18
17 16 23 25 26}) 172.20.10.40: *NEEDED_PREAUTH*: bcos...@ipa.domain.com
for krbtgt/ipa.domain@ipa.domain.com, *Additional pre-authentication
required*

Apr 15 15:43:49 ipa.domain.com krb5kdc[2568](info): closing down fd 12

Apr 15 15:43:55 ipa.domain.com krb5kdc[2565](info): preauth
(encrypted_timestamp) verify failure: *Decrypt integrity check failed*

Apr 15 15:43:55 ipa.domain.com krb5kdc[2565](info): AS_REQ (6 etypes {18
17 16 23 25 26}) 172.20.10.40: *PREAUTH_FAILED*: bcos...@ipa.domain.com
for krbtgt/ipa.domain@ipa.domain.com, Decrypt integrity check failed

Gady Notrica| IT Systems Analyst | 416.814.7800 Ext. 7921 | Cell.
416.818.4797 | gnotr...@candeal.com 

CanDeal | 152 King St. E, 4th Floor, Toronto ON M5A 1J4 |
www.candeal.com | Follow us:Description:
Description: cid:image003.jpg@01CBD419.622CDF90
*Description: Description: Description:
cid:image002.jpg@01CBD419.622CDF90*






--
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go to http://freeipa.org for more info on the project

[Freeipa-users] NEEDED_PREAUTH: Additional pre-authentication required - User can't access any centos server

2016-04-18 Thread Gady Notrica 
Hi guys,

>From the ipa server, I am having issue with the single user. Everyone else is 
>fine, just this one single user and no help anywhere online.

Please help!

Thank you

Apr 15 15:43:36 ipa.domain.com krb5kdc[2568](info): AS_REQ (6 etypes {18 17 16 
23 25 26}) 172.20.10.40: NEEDED_PREAUTH: bcos...@ipa.domain.com for 
krbtgt/ipa.domain@ipa.domain.com, Additional pre-authentication required
Apr 15 15:43:36 ipa.domain.com krb5kdc[2568](info): closing down fd 12
Apr 15 15:43:41 ipa.domain.com krb5kdc[2565](info): preauth 
(encrypted_timestamp) verify failure: Decrypt integrity check failed
Apr 15 15:43:41 ipa.domain.com krb5kdc[2565](info): AS_REQ (6 etypes {18 17 16 
23 25 26}) 172.20.10.40: PREAUTH_FAILED: bcos...@ipa.domain.com for 
krbtgt/ipa.domain@ipa.domain.com, Decrypt integrity check failed
Apr 15 15:43:41 ipa.domain.com krb5kdc[2565](info): closing down fd 12
Apr 15 15:43:49 ipa.domain.com krb5kdc[2568](info): AS_REQ (6 etypes {18 17 16 
23 25 26}) 172.20.10.40: NEEDED_PREAUTH: bcos...@ipa.domain.com for 
krbtgt/ipa.domain@ipa.domain.com, Additional pre-authentication required
Apr 15 15:43:49 ipa.domain.com krb5kdc[2568](info): closing down fd 12
Apr 15 15:43:55 ipa.domain.com krb5kdc[2565](info): preauth 
(encrypted_timestamp) verify failure: Decrypt integrity check failed
Apr 15 15:43:55 ipa.domain.com krb5kdc[2565](info): AS_REQ (6 etypes {18 17 16 
23 25 26}) 172.20.10.40: PREAUTH_FAILED: bcos...@ipa.domain.com for 
krbtgt/ipa.domain@ipa.domain.com, Decrypt integrity check failed

Gady Notrica | IT Systems Analyst | 416.814.7800 Ext. 7921 | Cell. 416.818.4797 
| gnotr...@candeal.com
CanDeal | 152 King St. E, 4th Floor, Toronto ON M5A 1J4 | 
www.candeal.com | Follow us: [Description: Description: 
cid:image003.jpg@01CBD419.622CDF90]    
[Description: Description: Description: cid:image002.jpg@01CBD419.622CDF90] 


-- 
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go to http://freeipa.org for more info on the project