Kerberos & AD Setup Issue

[Ranjith Murugan]

Hi all

 

I have been trying to setup an Kerberos and Active Directory setup, Seeing
the same issue you have mentioned in you post (Preauth and ticket
forwarding). I am currently not able to login to a windows machine using a
kerberos user. The Kerberos Server logs show a error [NEEDED_PREAUTH:
admin at QA12.INT for krbtgt/QA12.INT at QA12.INT, Additional pre-authentication
required]. 

 

Error from the kerberos server:

 

Aug 23 12:19:33 lhr-qa12 krb5kdc[4712](info): AS_REQ (7 etypes {23 -133
-128 3 1 24 -135}) 10.20.221.180: NEEDED_PREAUTH: admin at QA12.INT for
krbtgt/QA12.INT at QA12.INT, Additional pre-authentication required

Aug 23 12:19:33 lhr-qa12 krb5kdc[4712](info): AS_REQ (2 etypes {3 1})
10.20.221.180: ISSUE: authtime 1314098373, etypes {rep=3 tkt=1 ses=1},
admin at QA12.INT for krbtgt/QA12.INT at QA12.INT

Aug 23 12:19:33 lhr-qa12 krb5kdc[4712](info): TGS_REQ (7 etypes {23 -133
-128 3 1 24 -135}) 10.20.221.180: ISSUE: authtime 1314098373, etypes
{rep=1 tkt=1 ses=1}, admin at QA12.INT for krbtgt/QA10.INT at QA12.INT

Aug 23 12:19:33 lhr-qa12 krb5kdc[4712](info): TGS_REQ (7 etypes {23 -133
-128 3 1 24 -135}) 10.20.221.180: ISSUE: authtime 1314098373, etypes
{rep=1 tkt=16 ses=1}, admin at QA12.INT for host/dmtest.qa10.int at QA12.INT

 

Environment: 

-          Kerberos Server(Ubuntu 10.10)

-          AD - Windows 2003 R2

 

Could you please let me know if you have solved the problem you have
mentioned in "Preauth and ticket forwarding"? 

 

Regards,

Ranjith.