Kerberos V5 refuses authentication because Kerberos checksum verification failed: Bad encryption type

Steven Miller stevenraymillerjr at yahoo.com
Thu Feb 14 09:50:49 EST 2008


I believe that solaris (as as solaris 9) only supports
des-cbc-crc encrypion. 

Hope that helps,

Steven

--- Victor Sudakov <vas at mpeks.no-spam-here.tomsk.su>
wrote:

> Colleagues,
> 
> What could be the reason that I cannot telnet from
> FreeBSD to Solaris 10
> with the following error:
> 
> Connected to oracle.sibptus.tomsk.ru.
> Escape character is '^]'.
> [ Trying mutual KERBEROS5
> (host/oracle.sibptus.tomsk.ru at SIBPTUS.TOMSK.RU)... ]
> [ Kerberos V5 refuses authentication because
> Kerberos checksum verification failed: Bad
> encryption type ]
> [ Trying KERBEROS5
> (host/oracle.sibptus.tomsk.ru at SIBPTUS.TOMSK.RU)... ]
> [ Kerberos V5 refuses authentication because
> Kerberos checksum verification failed: Bad
> encryption type ]
> Password:
> 
> Kerberized telnet and ssh work fine between FreeBSD
> systems, but
> Solaris is a problem.
> 
> The kdc is Heimdal running on FreeBSD. The keytab
> for the host
> principal was exported on FreeBSD and then
> transferred to Solaris and
> imported there.
> 
> Thank you in advance for any input.
> 
> -- 
> Victor Sudakov,  VAS4-RIPE, VAS47-RIPN
> 2:5005/49 at fidonet http://vas.tomsk.ru/
> ________________________________________________
> Kerberos mailing list           Kerberos at mit.edu
> https://mailman.mit.edu/mailman/listinfo/kerberos
> 



      ____________________________________________________________________________________
Be a better friend, newshound, and 
know-it-all with Yahoo! Mobile.  Try it now.  http://mobile.yahoo.com/;_ylt=Ahu06i62sR8HDtDypao8Wcj9tAcJ 




More information about the Kerberos mailing list