Problem with auth via keytab w/ w2k3 KDC, works fine with w2k DC

Neulinger, Nathan nneul at umr.edu
Wed Apr 7 16:25:55 EDT 2004


> >    ktutil, create keytab with that password, des-cbc-crc, kvno 1
> >    ktutil, create keytab with that password, des-cbc-crc, kvno 3
> 
> This might be the problem. Can you create the the keytab with 
> des-cbc-md5, 
> as the W2003 may be only accepting des-cbc-md5 as the e-type, 
> and when used with 
> kinit, kinit may be trying to what it found in the keytab, 
> des-cbc-crc, and w2003
> will only accept des-cbc-md5.

No go... Still get preauthentication failed. Also tried changing the
enctypes options in krb5.conf to only list md5 instead of crc and md5,
also no change. Password based auth still works fine.



More information about the Kerberos mailing list