[krbdev.mit.edu #8237] Heimdahl Kerberos on MacOSX 10.9.5 using pkinit produces verify error

Machin@krbdev.mit.edu Machin at krbdev.mit.edu
Sat Aug 22 21:57:09 EDT 2015


kinit -C KEYCHAIN -D KEYCHAIN: produces the following error on the KDC:

Aug 22 19:23:35 as36snllx krb5kdc[25098]: preauth (pkinit) verify 
failure: error:0D08303A:asn1 encoding 
routines:ASN1_TEMPLATE_NOEXP_D2I:nested asn1 error
Aug 22 19:23:35 as36snllx krb5kdc[25098]: AS_REQ (7 etypes {18 17 16 23 
3 2 1}) 134.253.253.38: PREAUTH_FAILED: gmachin at dce.sandia.gov for 
krbtgt/dce.sandia.gov at dce.sandia.gov, error:0D08303A:asn1 encoding 
routines:ASN1_TEMPLATE_NOEXP_D2I:nested asn1 error


KDC is 1-10-3

Is this a known problem?


Any help would be appreciated?


Glenn




More information about the krb5-bugs mailing list