KRBCONF_KDC_MODIFIES_KDB

[Matt Crawford]

(This should be on kerberos, not krbdev, na?)


On Jan 15, 2004, at 1:59 PM, Prabhakaran vaidya wrote:

> I have a related question. We were trying to look at kdc.log files to 
> find if there was an incorrect password attempt and could not find any 
> difference between successful and unsuccessful attempts. Any help how 
> to get this information will be appreciated.

The difference is between ISSUE and PREAUTH_FAILED.  If you don't have 
all principals tagged as REQUIRES_PREAUTH, this inability to 
distinguish good from bad attempts is not actually your biggest 
problem.