Wrong principal in request

[Russ Allbery]

Jeff Blaine <jblaine at kickflop.net> writes:

> Server: CentOS 5.3, MIT Kerberos 1.6.x, Russ Alberry's pam_krb5

> Failure: Aside from GSSAPI not being used...

> sshd[12234]: pam_krb5RA(sshd:auth): pam_sm_authenticate: entry (0x1)
> sshd[12234]: pam_krb5RA(sshd:auth): (user jblaine) attempting 
> authentication as jblaine at FOO
> sshd[12234]: pam_krb5RA(sshd:auth): (user jblaine) credential 
> verification failed: Wrong principal in request

Usually this means the principal in the system keytab for your system
doesn't agree with the hostname or DNS name of the system.

-- 
Russ Allbery (rra at stanford.edu)             <http://www.eyrie.org/~eagle/>