directory-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Ed Brown <Ed.Br...@sas.com>
Subject RE: Question Concerning Kerberos "Additional Pre-Authorization Required" Error
Date Tue, 09 Jun 2015 03:59:35 GMT
Thank you.
I did that and now I get another error. I've posted what that error is in another thread.

Ed Brown

-----Original Message-----
From: Kiran Ayyagari [mailto:kayyagari@apache.org] 
Sent: Monday, June 08, 2015 11:25 PM
To: users@directory.apache.org
Subject: Re: Question Concerning Kerberos "Additional Pre-Authorization Required" Error

On Tue, Jun 9, 2015 at 3:52 AM, Ed Brown <Ed.Brown@sas.com> wrote:

> Hello,
> I'm getting the following error when I tried to authenticate using 
> Kerberos from Apache DS Studio:
>
> [15:27:55] DEBUG 
> [org.apache.directory.shared.kerberos.messages.KrbError]
> - KrbError initial value :
> KRB-ERROR : {
>     pvno: 5
>     msgType: KRB_ERROR
>     sTime: 20150608192755Z
>     susec: 0
>     errorCode: Additional pre-authentication required
>     realm: EDWIN.COM
>     sName: { name-type: KRB_NT_SRV_INST, name-string : <'krbtgt', '
> mytest.com'>realm: MYTEST.COM }
>     eText: Additional pre-authentication required
>
> try after turning off the pre-auth mechanism in server
to turn it off:
1. go to the entry
ads-serverId=kerberosServer,ou=servers,ads-directoryServiceId=default,ou=config
2. set ads-krbPaEncTimestampRequired to FALSE 3. restart the server

>
>
> What is causing this to happen and how do I fix it?
> I followed the instructions in the manual, multiple times.
>
> Thanks in advance.
>
> Ed Brown
>
>
>


--
Kiran Ayyagari
http://keydap.com
Mime
View raw message