WebCT Vista and pre-auth

[Jeffrey Altman]

John Hascall wrote:
> Has anyone else had difficulties with WebCT Vista
> and pre-auth?  If a principal with +requires_preauth
> attempts login it fails and we log:
> 
> Apr 18 15:38:02 kerberos-2.iastate.edu krb5kdc[9058](info): \
>         preauth (timestamp) verify failure: Decrypt integrity check failed
> 
> Apr 18 15:38:02 kerberos-2.iastate.edu krb5kdc[9058](info): \
>         AS_REQ (3 etypes {23 3 1}) 192.168.140.52: \
>         PREAUTH_FAILED: principal at IASTATE.EDU for \
>         krbtgt/IASTATE.EDU at IASTATE.EDU, Decrypt integrity check failed
> 
> (this is Kerberos 5 Version 1.4.3).
> 
> Thanks,
> John

John:

Would you please open up a bug report in krb5-bugs at mit.edu and
specify the answers to the following questions:

(1) did you use the Vista version of ksetup.exe or an earlier
    version?

    if an earlier version, which version?

(2) does the machine have a password assigned with
    ksetup /setcomputerpassword ?

(3) which other ksetup options did you specify?

(4) which enctypes are defined for principal at IASTATE.EDU?

Thanks.

Jeffrey Altman