Re: krb5_verify_user_opt failed

[Buck Huppmann <buckh@pobox.com>]

On Wed, Sep 14, 2005 at 10:28:13PM -0400, German Shorthair wrote:

> Sep  1 18:19:43 ldap-1 saslauthd[8633]: do_auth         : auth
> failure: [user=jdoe] [service=imap] [realm=someschool.edu]
                        ^^^^^^^^^^^^
			do you need a key for this in your keytab
			(and in your realm database), maybe?

--buck

> [root@ldap-1 saslauthd]# /usr/heimdal/sbin/ktutil list
> FILE:/etc/krb5.keytab:
> 
> Vno  Type                     Principal
>  1  des-cbc-md5              ldap/ldap-1.someschool.edu@SOMESCHOOL.EDU
>  1  des-cbc-md4              ldap/ldap-1.someschool.edu@SOMESCHOOL.EDU
>  1  des-cbc-crc              ldap/ldap-1.someschool.edu@SOMESCHOOL.EDU
>  1  aes256-cts-hmac-sha1-96  ldap/ldap-1.someschool.edu@SOMESCHOOL.EDU
>  1  des3-cbc-sha1            ldap/ldap-1.someschool.edu@SOMESCHOOL.EDU
>  1  arcfour-hmac-md5         ldap/ldap-1.someschool.edu@SOMESCHOOL.EDU
>  1  des-cbc-md5              host/ldap-1.someschool.edu@SOMESCHOOL.EDU
>  1  des-cbc-md4              host/ldap-1.someschool.edu@SOMESCHOOL.EDU
>  1  des-cbc-crc              host/ldap-1.someschool.edu@SOMESCHOOL.EDU
>  1  aes256-cts-hmac-sha1-96  host/ldap-1.someschool.edu@SOMESCHOOL.EDU
>  1  des3-cbc-sha1            host/ldap-1.someschool.edu@SOMESCHOOL.EDU
>  1  arcfour-hmac-md5         host/ldap-1.someschool.edu@SOMESCHOOL.EDU