KRBCONF_KDC_MODIFIES_KDB
Prabhakaran vaidya
prab at apple.com
Thu Jan 15 18:59:01 EST 2004
On Jan 15, 2004, at 2:16 PM, Matt Crawford wrote:
> (This should be on kerberos, not krbdev, na?)
>
>
> On Jan 15, 2004, at 1:59 PM, Prabhakaran vaidya wrote:
>
>> I have a related question. We were trying to look at kdc.log files to
>> find if there was an incorrect password attempt and could not find
>> any difference between successful and unsuccessful attempts. Any help
>> how to get this information will be appreciated.
>
> The difference is between ISSUE and PREAUTH_FAILED. If you don't have
> all principals tagged as REQUIRES_PREAUTH, this inability to
> distinguish good from bad attempts is not actually your biggest
> problem.
>
>
Sorry, was our fault. It was a configuration issue. we have enabled pre
auth now,
thanks for the help,
-prab
More information about the krbdev
mailing list