directory-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Eirik Bjørsnøs <>
Subject KdcConnection with Active Directory
Date Wed, 26 Feb 2014 10:34:24 GMT

I'm trying out KdcConnection using Microsoft Active Directory as KDC.

On getTgt, I first get KRB5KRB_ERR_PREAUTH_REQUIRED. KdcConnection
retries with a PaEncTsEnc added to the request.

The response to this second request is KDC_ERR_PREAUTH_FAILED.

Any idea why that would happen?

My understanding is that pre authentication involves encrypting a hash
of the current timestamp.

Any reason this could fail when talking to AD?


View raw message