directory-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Wei Zhou (JIRA)" <j...@apache.org>
Subject [jira] [Updated] (DIRKRB-255) Kinit failed to get TGT from MIT's KDC server
Date Tue, 09 Jun 2015 05:45:00 GMT

     [ https://issues.apache.org/jira/browse/DIRKRB-255?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]

Wei Zhou updated DIRKRB-255:
----------------------------
    Attachment: DIRKRB-255-v1.patch

This patch fixes two issues in the flow of getting TGT:
1. Kinit send wrong data to MIT KDC server.
2. The index replied by KDC server is not acceptable by Kinit. Thanks!

> Kinit failed to get TGT from MIT's KDC server
> ---------------------------------------------
>
>                 Key: DIRKRB-255
>                 URL: https://issues.apache.org/jira/browse/DIRKRB-255
>             Project: Directory Kerberos
>          Issue Type: Sub-task
>            Reporter: Wei Zhou
>            Assignee: Wei Zhou
>         Attachments: DIRKRB-255-v1.patch
>
>
> MIT's KDC server responses with KRB_ERROR
> Error log in MIT KDC:
> Jun 09 13:23:29 krb5kdc[1191](info): preauth (encrypted_timestamp) verify failure: ASN.1
structure is missing a required field
> Jun 09 13:23:29 krb5kdc[1191](info): AS_REQ (1 etypes {17}) 127.0.0.1: PREAUTH_FAILED:
admin/admin@EXAMPLE.COM for krbtgt/EXAMPLE.COM@EXAMPLE.COM, Preauthentication failed



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message