I tried these packages today: # dpkg -l |grep krb ii krb5-user 1.10.1+dfsg-1 Basic programs to authenticate using MIT Kerberos ii libgssapi-krb5-2 1.10.1+dfsg-1 MIT Kerberos runtime libraries - krb5 GSS-API Mechanism ii libkrb5-3 1.10.1+dfsg-1 MIT Kerberos runtime libraries ii libkrb5support0 1.10.1+dfsg-1 MIT Kerberos runtime libraries - Support library ii libpam-krb5 4.5-4 PAM module for MIT Kerberos
and got: May 14 11:52:05 vpn-gw-int openvpn[725]: pam_per_user: create_subrequest_handle(): doing map lookup for user "froemmel" May 14 11:52:05 vpn-gw-int openvpn[725]: pam_per_user: create_subrequest_handle(): creating new subrequest (user="froemmel", service="openvpn-krb5") May 14 11:52:05 vpn-gw-int openvpn[725]: pam_krb5(openvpn-krb5:auth): pam_sm_authenticate: entry May 14 11:52:05 vpn-gw-int openvpn[725]: pam_krb5(openvpn-krb5:auth): (user froemmel) attempting authentication as [email protected] May 14 11:52:05 vpn-gw-int openvpn[725]: pam_krb5(openvpn-krb5:auth): (user froemmel) credential verification failed: KDC has no support for encryption type May 14 11:52:05 vpn-gw-int openvpn[725]: pam_krb5(openvpn-krb5:auth): authentication failure; logname=froemmel uid=0 euid=0 tty= ruser= rhost= May 14 11:52:05 vpn-gw-int openvpn[725]: pam_krb5(openvpn-krb5:auth): pam_sm_authenticate: exit (failure) I then subsequently downgraded to: ii krb5-user 1.8.3+dfsg-4squeeze5 Basic programs to authenticate using MIT Kerberos ii libgssapi-krb5-2 1.8.3+dfsg-4squeeze5 MIT Kerberos runtime libraries - krb5 GSS-API Mechanism ii libkrb5-3 1.8.3+dfsg-4squeeze5 MIT Kerberos runtime libraries ii libkrb5support0 1.8.3+dfsg-4squeeze5 MIT Kerberos runtime libraries - Support library ii libpam-krb5 4.3-1 PAM module for MIT Kerberos and got it working again: May 14 11:53:12 vpn-gw-int openvpn[725]: pam_per_user: create_subrequest_handle(): doing map lookup for user "froemmel" May 14 11:53:12 vpn-gw-int openvpn[725]: pam_per_user: create_subrequest_handle(): creating new subrequest (user="froemmel", service="openvpn-krb5") May 14 11:53:12 vpn-gw-int openvpn[725]: pam_krb5(openvpn-krb5:auth): pam_sm_authenticate: entry (0x0) May 14 11:53:12 vpn-gw-int openvpn[725]: pam_krb5(openvpn-krb5:auth): (user froemmel) attempting authentication as [email protected] May 14 11:53:12 vpn-gw-int openvpn[725]: pam_krb5(openvpn-krb5:auth): user froemmel authenticated as [email protected] May 14 11:53:12 vpn-gw-int openvpn[725]: pam_krb5(openvpn-krb5:auth): pam_sm_authenticate: exit (success) -- To UNSUBSCRIBE, email to [email protected] with a subject of "unsubscribe". Trouble? Contact [email protected]
