Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

when I try to authentication with heimdal-kdc ,I get this error in kdc log :

(enctype aes256-cts-hmac-sha1-96) error Decrypt integrity check failed for checksum type hmac-sha1-96-aes256, key type aes256-cts-hmac-sha1-96

and authentication failed!!!

but authentication with kinit is correct!!

my kerb5.conf is

default = FILE:/var/log/krb5libs.log
kdc = FILE:/var/log/krb5kdc.log
krb5 = FILE:/var/log/krb5.log

    default_realm = AUTH.LANGHUA
    clockskew = 300

            kdc = AUTH.LANGHUA

    .langhua = AUTH.LANGHUA


and when add this line to krb5.conf (in kdc tag)

require-preauth = no

I get this error

krb5_get_init_creds: Client have no reply key
share|improve this question

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.