Decrypt integrity check failed

[Muhammed Reahan]

Decrypt integrity check failed
First of all I created a principal name test. It is successfully created
i entered the password  for it two times.
at this time the following attributes of test principal has the database

kadmin.local:  getprinc test
Principal: test at VISION.PAF
Expiration date: [never]
Last password change: Mon Jul 07 17:01:30 Gmt 2003
Password expiration date: [none]
Maximum ticket life: 24855 days 03:14:07
Maximum renewable life: 24855 days 03:14:07
Last modified: Mon Jul 07 17:01:30 Gmt 2003 (root/admin at VISION.PAF)
Last successful authentication: [never]
Last failed authentication: [never]
Failed password attempts: 0
Number of keys: 1
Key: vno 1, DES cbc mode with CRC-32, no salt
Attributes:
Policy: [none]
Then i added the entry for the principal in the keytab file as 

kadmin.local: ktadd test
Entry for principal test with kvno 2, encryption type DES-CBC-CRC added to keytab 
WRFILE:/etc/krb5/krb5.keytab.

Then the attribute of test principal in the database are as follows

kadmin.local:  getprinc test
Principal: test at VISION.PAF
Expiration date: [never]
Last password change: Mon Jul 07 17:04:24 Gmt 2003
Password expiration date: [none]
Maximum ticket life: 24855 days 03:14:07
Maximum renewable life: 24855 days 03:14:07
Last modified: Mon Jul 07 17:04:24 Gmt 2003 (root/admin at VISION.PAF)
Last successful authentication: [never]
Last failed authentication: [never]
Failed password attempts: 0
Number of keys: 1
Key: vno 2, DES cbc mode with CRC-32, no salt
Attributes:
Policy: [none]

The enteries in the keytab file shows as follows

 klist -k    
Keytab name: FILE:/etc/krb5/krb5.keytab
KVNO Principal
---- --------------------------------------------------------------------------
   3 host/mrt-mccgui.vision.paf at VISION.PAF
   7 root/mrt-mccgui.vision.paf at VISION.PAF
   2 test at VISION.PAF
      
   
   Now i want to get the ticket of principal test  with kinit command.
   
   kinit test
Password for test at VISION.PAF: 
kinit: Password incorrect
i entered the password correctly which i entered the first time.But automatically password is 
changed. i have tried this with two or three principals.
Now if i change the password using kadmin then kVNO is changed and becomes 3
But in the keytable file krb5.keytab its version number is 2 now in the database KVNO is  3 so here is missmatch of keys number.

If i repeat the step once again and add entery once again in the key tab file
then the keyVNO became same at both places that is 4.
Now if i want to get the credential for the principal test then the again error message comes that your password is in correct.so this goes same like a loop.
 
Another solution is that if i change the KVNO using gkadmin programe
the KVNO is successfully changed.
Then my programe gives me the following error message while accepting security context 
GSS-API error accepting context: Unspecified GSS failure.  Minor code may provide more information
GSS-API error accepting context: Decrypt integrity check failed
please help me in this regard
Thanks in advance
By Reahan Bahria University (BIMCS) ISlamabad


---------------------------------
Do you Yahoo!?
SBC Yahoo! DSL - Now only $29.95 per month!!From adv at body-building-equpiment.com Tue Jul  8 11:54:29 2003
Received: from fort-point-station.mit.edu (FORT-POINT-STATION.MIT.EDU
	[18.7.7.76])
	by pch.mit.edu (8.12.8p1/8.12.8) with ESMTP id h68FsTk0005051
	for <kerberos at PCH.mit.edu>; Tue, 8 Jul 2003 11:54:29 -0400 (EDT)
Received: from tomer.eliteplanet.net ([64.237.60.52])h68FsTZY023385
	for <kerberos at MIT.EDU>; Tue, 8 Jul 2003 11:54:29 -0400 (EDT)
Received: from localhost.localdomain (localhost.localdomain [127.0.0.1])
	by tomer.eliteplanet.net (8.12.8/8.12.8) with SMTP id h68DX6pL010636
	for <kerberos at MIT.EDU>; Tue, 8 Jul 2003 09:33:06 -0400
Message-Id: <200307081333.h68DX6pL010636 at tomer.eliteplanet.net>
Mime-version: 1.0
Content-type: text/plain; charset="iso-8859-1"
To: kerberos at MIT.EDU
Date: Tue, 8 Jul 2003 09:33 -0400
From: adv at body-building-equpiment.com
Content-Transfer-Encoding: 8bit
X-MIME-Autoconverted: from quoted-printable to 8bit by pch.mit.edu id
	h68FsTk0005051
Subject: Placing text links ads on your website
X-BeenThere: kerberos at mit.edu
X-Mailman-Version: 2.1
Precedence: list
List-Id: The Kerberos Authentication System Mailing List <kerberos.mit.edu>
List-Help: <mailto:kerberos-request at mit.edu?subject=help>
List-Post: <mailto:kerberos at mit.edu>
List-Subscribe: <https://mailman.mit.edu/mailman/listinfo/kerberos>,
	<mailto:kerberos-request at mit.edu?subject=subscribe>
List-Archive: <http://mailman.mit.edu/pipermail/kerberos>
List-Unsubscribe: <https://mailman.mit.edu/mailman/listinfo/kerberos>,
	<mailto:kerberos-request at mit.edu?subject=unsubscribe>
X-List-Received-Date: Tue, 08 Jul 2003 15:54:30 -0000


		Hey.
		I would like to get info about placing an ad on your website - http://wwwietf.org/rfc/rfc1510.txt.
		we own a few sport, fashion and hotels reservation websites and we just got a new budget
		for adversiting and we would Like to get your price offer fortext link adversitement.

		 Thanks,
		  John Sigal.
		    adv at body-building-equpiment.com