On Tue, Jun 9, 2015 at 3:52 AM, Ed Brown <[email protected]> wrote:

> Hello,
> I'm getting the following error when I tried to authenticate using
> Kerberos from Apache DS Studio:
>
> [15:27:55] DEBUG [org.apache.directory.shared.kerberos.messages.KrbError]
> - KrbError initial value :
> KRB-ERROR : {
>     pvno: 5
>     msgType: KRB_ERROR
>     sTime: 20150608192755Z
>     susec: 0
>     errorCode: Additional pre-authentication required
>     realm: EDWIN.COM
>     sName: { name-type: KRB_NT_SRV_INST, name-string : <'krbtgt', '
> mytest.com'>realm: MYTEST.COM }
>     eText: Additional pre-authentication required
>
> try after turning off the pre-auth mechanism in server
to turn it off:
1. go to the entry
ads-serverId=kerberosServer,ou=servers,ads-directoryServiceId=default,ou=config
2. set ads-krbPaEncTimestampRequired to FALSE
3. restart the server

>
>
> What is causing this to happen and how do I fix it?
> I followed the instructions in the manual, multiple times.
>
> Thanks in advance.
>
> Ed Brown
>
>
>


-- 
Kiran Ayyagari
http://keydap.com

Reply via email to