Help: Decrypt integrity check failed error in Apache
Lee Eric
openlinuxsource at gmail.com
Thu Aug 11 05:08:11 EDT 2011
Hi,
I encountered following error from /var/log/httpd/error.log as I type
username and password.
Aug 10 21:45:38 service.herdingcat.internal krb5kdc[19684](info):
AS_REQ (7 etypes {18 17 16 23 1 3 2}) 192.168.122.2: NEEDED_PREAUTH:
huli at HERDINGCAT.INTERNAL for
krbtgt/HERDINGCAT.INTERNAL at HERDINGCAT.INTERNAL, Additional
pre-authentication required
Aug 10 21:45:38 service.herdingcat.internal krb5kdc[19684](info):
preauth (timestamp) verify failure: Decrypt integrity check failed
Aug 10 21:45:38 service.herdingcat.internal krb5kdc[19684](info):
AS_REQ (7 etypes {18 17 16 23 1 3 2}) 192.168.122.2: PREAUTH_FAILED:
huli at HERDINGCAT.INTERNAL for
krbtgt/HERDINGCAT.INTERNAL at HERDINGCAT.INTERNAL, Decrypt integrity
check failed
Here's the configuration for mod_auth_kerb module.
LoadModule auth_kerb_module modules/mod_auth_kerb.so
<Location />
SSLRequireSSL
AuthType Kerberos
AuthName "Kerberos Login"
KrbMethodNegotiate On
KrbMethodK5Passwd On
KrbAuthRealms HERDINGCAT.INTERNAL
Krb5KeyTab /etc/krb5.keytab
require valid-user
</Location>
Can anyone show me how to fix that?
Thanks.
Eric Lee
More information about the Kerberos
mailing list