kprop

Ted Kaczmarek tedkaz at optonline.net
Thu May 5 15:35:46 EDT 2005


I am having problem with kprop. Linux distro Centos 4.0(RH ES4 clone).

/usr/kerberos/sbin/kprop: Server rejected authentication (during
sendauth exchange) while authenticating to server
/usr/kerberos/sbin/kprop: Decrypt integrity check failed signalled from
server
Error text from server: Decrypt integrity check failed

>From kdc.conf realms section, same on Master and slave

master_key_type = des3-hmac-sha1
supported_enctypes = des3-hmac-sha1:normal des-cbc-crc:normal

I tried using A records and cnames in krb5.conf, same results, tried
using A record and cname passed to kprop as well. 

Also am a tad confused as to exactly what admin_server should be for the
slave.
Should it be the master or the slave. Since from what I have read
Kerberos has no clue whether it itself is a master or a slave.

I have everything working fine except kprop at this point, any pointers
would be appreciated.


Ted




More information about the Kerberos mailing list