Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

when I try to authentication with heimdal-kdc ,I get this error in kdc log :

(enctype aes256-cts-hmac-sha1-96) error Decrypt integrity check failed for checksum type hmac-sha1-96-aes256, key type aes256-cts-hmac-sha1-96

and authentication failed!!!

but authentication with kinit is correct!!

my kerb5.conf is

[logging]
default = FILE:/var/log/krb5libs.log
kdc = FILE:/var/log/krb5kdc.log
krb5 = FILE:/var/log/krb5.log

[libdefaults]
    default_realm = AUTH.LANGHUA
    clockskew = 300

[realms]
    AUTH.LANGHUA = {
            kdc = AUTH.LANGHUA
    }

[domain_realm]
    .langhua = AUTH.LANGHUA

[kdc]

and when add this line to krb5.conf (in kdc tag)

require-preauth = no

I get this error

krb5_get_init_creds: Client have no reply key
share|improve this question

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.