Re: Preauthentication failed

[Michael B Allen <mba2000@ioplex.com>]

On Tue, 15 May 2007 14:00:57 +0200
Florian Erfurth <floh-erfurth@arcor.de> wrote:

> Hi, I followed the steps described in http://www.grolmsnet.de/kerbtut/.
> Unfortunatelly I get a error if I enter following:
> >>>
> -bash-3.00# kinit -k -t /usr/local/etc/apache2/bsdflohkeytab
> HTTP/BSDfloh.domain.tld
> kinit: krb5_get_init_creds: Preauthentication failed
> <<<
>
> How can I find out, why the preauthentication is failed? Could anyone of you
> point a hint, what could be wrong?
> 
> I'm using FreeBSD 6.2 and Windows 2003 is installed as Domain Controller.
>

Preauthentication failed ~= bad password

The key, enctype or version number doesn't match what the Windows KDC
has. Re-run ktpass.exe and copy the keytab file over again.

> PS2: How do I know more from my keytab-file (I need info about kvno,
> principal name and encryption type)?

$ ktutil -k keytab list

Mike

-- 
Michael B Allen
PHP Active Directory Kerberos SSO
http://www.ioplex.com/