search for: krb5_verify_init_cr

...generated the keytab file with ktpass -princ host/fqdn@REALM -mapuser DOMAIN\SERVICEACCT$ -pass password -crypto DES-CBC-MD5 -ptype KRB5_NT_PRINCIPAL -out c:\temp\krb5.keytab I then ftped this file over to Solaris host and try to authenticate a user login via AD, I get PAM-KRB5 (auth): krb5_verify_init_creds failed: Server not found in Kerberos database So, just for the heck of it I generated another krb5.keytab with the following ktpass -princ HOST/fqdn@REALM -mapuser DOMAIN\SERVICEACCT$ -pass password -crypto DES-CBC-MD5 -ptype KRB5_NT_PRINCIPAL -out c:\temp\krb5.keytab Please note the...

...This allows me to ssh in to the machine using my kerberos password. When I run "net ads join -S domaincontroller -U Administration" , the samba join appears to work. However, I can no longer ssh in . The log files shows sshd[12225]: [ID 537602 auth.error] PAM-KRB5 (auth): krb5_verify_init_creds failed: Key version number for principal in key table is incorrect I ran kvno prior to "net join" to see if I could find any changes on any of the principals. I did not find any. However the "pwdLastSet" attribute was updated (which means, not surprisingly, that th...

...g my kerberos > password. > > > When I run "net ads join -S domaincontroller -U Administration" , the > samba join appears to work. However, I can no longer ssh in . > > The log files shows > > sshd[12225]: [ID 537602 auth.error] PAM-KRB5 (auth): > krb5_verify_init_creds failed: Key version number for principal in key > table is incorrect > > > I ran kvno prior to "net join" to see if I could find any changes on > any of the principals. I did not find any. However the "pwdLastSet" > attribute was updated (which means, n...