Decrypt integrity check failed

Christian cgregoir99 at yahoo.com
Tue Oct 29 05:56:20 EST 2002


"Christian" <cgregoir99 at yahoo.com> wrote in message
news:3dbe52f4$1$7112$4d4eb98e at read.news.fr.uu.net...
> Hello guys,
>
> Using the sclient and sserver examples, I've added them the crypting
> functionality with krb5_mk_priv / krb5_rd_priv. The client sends crypted
> data to the server, which reads, decrypts and displays it, then the server
> sends crypted data to the client which in turn reads, decrypts and
displays
> it.
>
> Linux RH 7.2
> Kerberos 1.2.6
> Client and server programs run both on the machine.
>
> The funny thing is that from time to time, the server gets the error
> 'Decrypt integrity check failed' when decrypting data sent by the client.
I
> can run these with no problem several times but sometimes, this error
> arises.
>
> Looking through FAQ, I've read that this error indicates that the key in
the
> keytab entry for the principal of the service was not the same as the one
> stored in the KDC's database. But I guess that if so in my case, that
would
> never work, whereas it does most of the time.
>
> Any idea ?
>
> Thanks.
>
> Christian.
>

Of course, before running both programs, I have a valid TGT.

I've also destroyed the current tickets (kdestroy), then deleted the entry
for the service in the keytab, then added it back again and the problem
still arises.







More information about the Kerberos mailing list