Help: Decrypt integrity check failed error in Apache

Lee Eric openlinuxsource at gmail.com
Thu Aug 11 05:08:11 EDT 2011


Hi,

I encountered following error from /var/log/httpd/error.log as I type
username and password.

Aug 10 21:45:38 service.herdingcat.internal krb5kdc[19684](info):
AS_REQ (7 etypes {18 17 16 23 1 3 2}) 192.168.122.2: NEEDED_PREAUTH:
huli at HERDINGCAT.INTERNAL for
krbtgt/HERDINGCAT.INTERNAL at HERDINGCAT.INTERNAL, Additional
pre-authentication required
Aug 10 21:45:38 service.herdingcat.internal krb5kdc[19684](info):
preauth (timestamp) verify failure: Decrypt integrity check failed
Aug 10 21:45:38 service.herdingcat.internal krb5kdc[19684](info):
AS_REQ (7 etypes {18 17 16 23 1 3 2}) 192.168.122.2: PREAUTH_FAILED:
huli at HERDINGCAT.INTERNAL for
krbtgt/HERDINGCAT.INTERNAL at HERDINGCAT.INTERNAL, Decrypt integrity
check failed

Here's the configuration for mod_auth_kerb module.

LoadModule auth_kerb_module modules/mod_auth_kerb.so

<Location />
  SSLRequireSSL
  AuthType Kerberos
  AuthName "Kerberos Login"
  KrbMethodNegotiate On
  KrbMethodK5Passwd On
  KrbAuthRealms HERDINGCAT.INTERNAL
  Krb5KeyTab /etc/krb5.keytab
  require valid-user
</Location>

Can anyone show me how to fix that?

Thanks.

Eric Lee



More information about the Kerberos mailing list