hi everyone
I'm trying freeIPA, trying to install a client and process
fails. On the freeIPA kerberos end:
16 23 25 26}) 10.5.6.17: NEEDED_PREAUTH:
host/dzien.priv.xx.xx.priv.xx.x...@private.xx.xx.private.xx.xx.x
for
krbtgt/private.xx.xx.private.xx.x...@private.xx.xx.private.xx.xx.x,
Additional pre-authentication required
Jan 10 15:11:50 swir.priv.xx.xx.priv.xx.xx.x
krb5kdc[606061](info): closing down fd 11
Jan 10 15:11:50 swir.priv.xx.xx.priv.xx.xx.x
krb5kdc[606061](info): preauth (encrypted_timestamp) verify
failure: Preauthentication failed
Jan 10 15:11:50 swir.priv.xx.xx.priv.xx.xx.x
krb5kdc[606061](info): AS_REQ (8 etypes {18 17 20 19 16 23
25 26}) 10.5.6.17: PREAUTH_FAILED:
host/dzien.priv.xx.xx.priv.xx.x...@private.xx.xx.private.xx.xx.x
for
krbtgt/private.xx.xx.private.xx.x...@private.xx.xx.private.xx.xx.x,
Preauthentication failed
Jan 10 15:11:50 swir.priv.xx.xx.priv.xx.xx.x
krb5kdc[606061](info): closing down fd 11
Jan 10 15:11:50 swir.priv.xx.xx.priv.xx.xx.x
krb5kdc[606061](info): AS_REQ (8 etypes {18 17 20 19 16 23
25 26}) 10.5.6.17: NEEDED_PREAUTH:
host/dzien.priv.xx.xx.priv.xx.x...@private.xx.xx.private.xx.xx.x
for
krbtgt/private.xx.xx.private.xx.x...@private.xx.xx.private.xx.xx.x,
Additional pre-authentication required
Jan 10 15:11:50 swir.priv.xx.xx.priv.xx.xx.x
krb5kdc[606061](info): closing down fd 11
Jan 10 15:11:50 swir.priv.xx.xx.priv.xx.xx.x
krb5kdc[606060](info): preauth (encrypted_timestamp) verify
failure: Preauthentication failed
Jan 10 15:11:50 swir.priv.xx.xx.priv.xx.xx.x
krb5kdc[606060](info): AS_REQ (8 etypes {18 17 20 19 16 23
25 26}) 10.5.6.17: PREAUTH_FAILED:
host/dzien.priv.xx.xx.priv.xx.x...@private.xx.xx.private.xx.xx.x
for
krbtgt/private.xx.xx.private.xx.x...@private.xx.xx.private.xx.xx.x,
Preauthentication failed
Jan 10 15:11:50 swir.priv.xx.xx.priv.xx.xx.x
krb5kdc[606060](info): closing down fd 11
I make sure both server's and clients time is synced.
I'm on centos 7.4 with krb5-libs-1.15.1-8.el7.x86_64
Would somebody be keen to shed more light on as what might
be the problem?
many thanks, L.
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
