Quantcast
Channel: General Networking
Viewing all articles
Browse latest Browse all 27527

Please help I am stuck

$
0
0

I have been trying to follow a guide to setup kerberos authentication to AD however I am stuck at the kinit command and receiving the message "Generic preauthentication failure while getting initial credentials" I have checked to ensure caps are used in the correct places for realm etc. I am able to authenticate using the command kinit -V user@DOMAIN I have tried uncommenting the default_tgs_enctypes, default_tkt_enctypes & permitted_enctypes for Win2k8 AES with no change to the results.

I am using a fresh installation of debian 4.6.3-14

My AD/DC is a Win2k8 Enterprise Server with host name RAIDEN The Debian host name is KERMIT Domain name: au.epcit.biz

krb5.conf

[libdefaults] ticket_lifetime = 24000 default_realm = AU.EPCIT.BIZ
[realms]
AU.EPCIT.BIZ = {
kdc = raiden.au.epcit.biz:88
admin_server = raiden.au.epcit.biz:749
default_domain = au.epcit.biz
}
....... (a bunch of other default realms here such as MIT etc)
[domain_realm]
.au.epcit.biz = AU.EPCIT.BIZ
au.epcit.biz = AU.EPCIT.BIZ
......... (default domain realms are here)

I have attempted using both keytab files merged as suggested and just the http keytab as indicated in your screen dump to see if just the HTTP would init however they are the same. I have also tried many variations on the priniciple when using ktpass

KVNO Timestamp Principal
---- ----------------- --------------------------------------------------------
21 19/02/14 12:53:16 HTTP/kermit.au.epcit.biz@AU.EPCIT.BIZ (arcfour-hmac)

Output from ktpass (i am unsure why I received the line "Using legacy password setting method")

Targeting domain controller: RAIDEN.au.epcit.biz
Using legacy password setting method
Successfully mapped HTTP/kermit.au.epcit.biz to kermit.
Key created.
Output keytab to c:\temp\kermit.HTTP.keytab:
Keytab version: 0x502
keysize 72 HTTP/kermit.au.epcit.biz@AU.EPCIT.BIZ ptype 1 (KRB5_NT_PRINCIPAL) vno
21 etype 0x17 (RC4-HMAC) keylength 16 (0x3ba7bbef0fa042156973776352a91ea0)

Any suggestions would be appreciated.


Viewing all articles
Browse latest Browse all 27527

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>