I'm trying to get a ticket on (one of) my homemachine(s), running Win98.
I have unpacked the 'kfw-2.1-bin.zip' in '\temp\'. CD'ing to the
'\temp\kfw-2.1\bin\i386\rel' directory and executing 'kinit.exec -5' will
prompt me for my password for '[EMAIL PROTECTED]' as it should (no errors
there). But it can't get a ticket, this is what it tells me:
KINIT.EXE(v5): Preauthentication failed while getting initial credentials
The clock on the win machine is set manually by watching 'date' on the KDC.
It should only diff <= 1 sec...
The win machine is behind a Linux firewall (iptables), and the KDC is on
the 'Net. Getting tickets from my Linux machine at home (behind same fw)
works like a charm...
I get this in my KDC logs:
----- s n i p -----
==> /var/log/kerberos/krb5kdc.log <==
Apr 19 08:00:26 papadoc krb5kdc[7826](info): preauth (timestamp) verify failure: No
matching key in entry
Apr 19 08:00:26 papadoc krb5kdc[7826](info): AS_REQ (3 etypes {16 1 3})
213.67.237.35(88): PREAUTH_FAILED: [EMAIL PROTECTED] for [EMAIL PROTECTED],
Preauthentication failed
Apr 19 08:00:26 papadoc krb5kdc[7826](info): AS_REQ (3 etypes {16 1 3})
213.67.237.35(88): NEEDED_PREAUTH: [EMAIL PROTECTED] for [EMAIL PROTECTED],
Additional pre-authentication required
Apr 19 08:00:26 papadoc krb5kdc[7826](info): preauth (timestamp) verify failure: No
matching key in entry
Apr 19 08:00:26 papadoc krb5kdc[7826](info): AS_REQ (3 etypes {16 1 3})
213.67.237.35(88): PREAUTH_FAILED: [EMAIL PROTECTED] for [EMAIL PROTECTED],
Preauthentication failed
----- s n i p -----
What exactly does 'preauth (timestamp) verify failure: No matching key in entry'
mean!?
--
iodine cracking BATF Rule Psix arrangements NSA SEAL Team 6 Saddam
Hussein FBI Panama congress Ortega Ft. Bragg Iran spy
[See http://www.aclu.org/echelonwatch/index.html for more about this]
________________________________________________
Kerberos mailing list [EMAIL PROTECTED]
http://mailman.mit.edu/mailman/listinfo/kerberos
