TGS_REP message gives error due to '0x7e' at the first. Reason?

[Ken Raeburn]

> The TGS_REP reply message is:
> ======================================================================
> 0x7e 0x62 0x30 0x60 0xa0 0x 3 0x 2 0x 1 0x 5 0xa1 0x 3
> 0x 2 0x 1 0x1e 0xa4 0x11
> 0x18 0x f 0x32 0x30
> krb5_Send_TGS: TGS-REP ERROR
>          SA: krb5_Send_TGS() Failed ...!!!!!!
> ======================================================================
>
> Since the first message is 0x7e, it is failing. becsue
> of the following macro verification
> ===================================================================
> #define krb5_is_krb_error(dat)\
>  ((dat) && (dat)->length && ((dat)->data[0] == 0x7e
> ||\
>         (dat)->data[0] == 0x5e))
> ----=================================================================
>
> Could you please let me know what could be the
> problem?

Well, it's not a TGS-REP message.  In response to a TGS-REQ, the KDC  
can send either a TGS-REP or a KRB-ERROR.  That macro you quoted  
would tell you that it looks like a KRB-ERROR message.  Try parsing  
that message, and it may give you more information about what went  
wrong.  (Or look at the KDC logs, if you can.)

Ken