I have been trying to follow a guide to setup kerberos authentication to AD however I am stuck at the kinit command and receiving the message "Generic preauthentication failure while getting initial credentials" I have checked to ensure caps are used in the correct places for realm etc. I am able to authenticate using the command kinit -V user@DOMAIN I have tried uncommenting the default_tgs_enctypes, default_tkt_enctypes & permitted_enctypes for Win2k8 AES with no change to the results.
I am using a fresh installation of debian 4.6.3-14
My AD/DC is a Win2k8 Enterprise Server with host name RAIDEN The Debian host name is KERMIT Domain name: au.epcit.biz
krb5.conf
[libdefaults] ticket_lifetime = 24000 default_realm = AU.EPCIT.BIZ
[realms]
AU.EPCIT.BIZ = {
kdc = raiden.au.epcit.biz:88
admin_server = raiden.au.epcit.biz:749
default_domain = au.epcit.biz
}
....... (a bunch of other default realms here such as MIT etc)
[domain_realm]
.au.epcit.biz = AU.EPCIT.BIZ
au.epcit.biz = AU.EPCIT.BIZ
......... (default domain realms are here)
I have attempted using both keytab files merged as suggested and just the http keytab as indicated in your screen dump to see if just the HTTP would init however they are the same. I have also tried many variations on the priniciple when using ktpass
KVNO Timestamp Principal
---- ----------------- --------------------------------------------------------
Output from ktpass (i am unsure why I received the line "Using legacy password setting method")
Targeting domain controller: RAIDEN.au.epcit.biz
Using legacy password setting method
Successfully mapped HTTP/kermit.au.epcit.biz to kermit.
Key created.
Output keytab to c:\temp\kermit.HTTP.keytab:
Keytab version: 0x502
21 etype 0x17 (RC4-HMAC) keylength 16 (0x3ba7bbef0fa042156973776352a91ea0)
Any suggestions would be appreciated.
I have been trying to follow a guide to setup kerberos authentication to AD however I am stuck at the kinit command and receiving the message "Generic preauthentication failure while getting initial credentials" I have checked to ensure caps are used in the correct places for realm etc. I am able to authenticate using the command kinit -V user@DOMAIN I have tried uncommenting the default_tgs_enctypes, default_tkt_enctypes & permitted_enctypes for Win2k8 AES with no change to the results.
I am using a fresh installation of debian 4.6.3-14
My AD/DC is a Win2k8 Enterprise Server with host name RAIDEN The Debian host name is KERMIT Domain name: au.epcit.biz
krb5.conf
I have attempted using both keytab files merged as suggested and just the http keytab as indicated in your screen dump to see if just the HTTP would init however they are the same. I have also tried many variations on the priniciple when using ktpass
Output from ktpass (i am unsure why I received the line "Using legacy password setting method")
Any suggestions would be appreciated.