KRBCONF_KDC_MODIFIES_KDB

Prabhakaran vaidya prab at apple.com
Thu Jan 15 18:59:01 EST 2004


On Jan 15, 2004, at 2:16 PM, Matt Crawford wrote:

> (This should be on kerberos, not krbdev, na?)
>
>
> On Jan 15, 2004, at 1:59 PM, Prabhakaran vaidya wrote:
>
>> I have a related question. We were trying to look at kdc.log files to 
>> find if there was an incorrect password attempt and could not find 
>> any difference between successful and unsuccessful attempts. Any help 
>> how to get this information will be appreciated.
>
> The difference is between ISSUE and PREAUTH_FAILED.  If you don't have 
> all principals tagged as REQUIRES_PREAUTH, this inability to 
> distinguish good from bad attempts is not actually your biggest 
> problem.
>
>
Sorry, was our fault. It was a configuration issue. we have enabled pre 
auth now,
thanks for the help,

-prab



More information about the krbdev mailing list