Decrypt integrity check failed

Sam Hartman hartmans at MIT.EDU
Tue Oct 29 14:39:17 EST 2002


It seems unlikely that you've got keytab problems if it ever works.
What call is returning the decrypt integrity check failed?  The
rd_priv call or the rd_req call?

Is it possible that your network code is somehow mangling data it is
sending some of the time? For example, does your code deal with nulls
in the output?


What this error means is that when some Kerberos message is decrypted,
the checksum does not agree with the message content.  This either
means the message was modified or the key is wrong.  The most common
cause is a persistent failure of krb5_rd_req caused by keytab keys not
agreeing with the KDC, but that seems not to be the case here.




More information about the Kerberos mailing list