kinit failed on - Integrity check on decrypted field failed

[Wu, James C.]

Hi,



I am trying to set up ApacheDS as a KDC. After adding hnelson using the 
following ldif, I could not get kinit to get the ticket



                dn: uid=hnelson,ou=users,dc=example,dc=com

                objectclass: top

                objectclass: person

                objectclass: inetOrgPerson

                objectclass: krb5Principal

                objectclass: krb5KDCEntry

                cn: Horatio Nelson

                sn: Nelson

                uid: hnelson

                userpassword: secret

                krb5PrincipalName: 
hnel...@example.com<mailto:hnel...@example.com>





The log output of ApacheDS show the following output:



                [cloud-user@n7-z01-0a2a0c3a ~]$ [17:15:57] ERROR 
[org.apache.directory.server.KERBEROS_LOG] - No timestamp found

                [17:15:57] WARN 
[org.apache.directory.server.kerberos.protocol.KerberosProtocolHandler] - 
Additional pre-authentication required (25)

                [17:15:57] WARN [org.apache.directory.server.KERBEROS_LOG] - 
Additional pre-authentication required (25)

                [17:16:00] WARN 
[org.apache.directory.server.kerberos.protocol.KerberosProtocolHandler] - 
Integrity check on decrypted field failed (31)

                [17:16:00] WARN [org.apache.directory.server.KERBEROS_LOG] - 
Integrity check on decrypted field failed (31)



Could someone give me some hint?



james