[validate_tgt] (0x0020): [RID#988] TGT failed verification using key for

Marco Moock mm at dorfdsl.de
Fri Jun 20 11:44:23 EDT 2025


Hello!

I want to attach a Fedora 42 system to MS AD. sssd seems to work as I
can retrieve user info from AD. Although, login on my system fails and
I get the following message in /var/log/sssd/krb5_child.log:

   *  (2025-06-18  8:02:33): [krb5_child[137885]] [validate_tgt]
     (0x0020): [RID#988] TGT failed verification using key for
     [redacted HOSTNAME]. ********************** BACKTRACE DUMP ENDS
     HERE *********************************

(2025-06-18  8:02:33): [krb5_child[137885]] [get_and_save_tgt]
(0x0020): [RID#988] 2359: [-1765328339][Service key not available]
(2025-06-18  8:02:33): [krb5_child[137885]] [map_krb5_error] (0x0040):
[RID#988] 2443: [-1765328339][Service key not available]
********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING
BACKTRACE:
   *  (2025-06-18  8:02:33): [krb5_child[137885]] [get_and_save_tgt]
(0x0020): [RID#988] 2359: [-1765328339][Service key not available]
   *  (2025-06-18  8:02:33): [krb5_child[137885]] [map_krb5_error]
(0x0040): [RID#988] 2443: [-1765328339][Service key not available]
********************** BACKTRACE DUMP ENDS HERE
*********************************

Can someone give a hint were to look for the problem?

-- 
kind regards
Marco



More information about the Kerberos mailing list