[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: krb5_verify_user_opt failed
I added the imap service and even ran testsaslauthd with host and ldap
as the service. Here's the result:
Sep 15 17:07:55 ldap-1 saslauthd[30446]: do_auth : auth
failure: [user=jdoe] [service=host] [realm=someschool.edu]
[mech=kerberos5] [reason=krb5_verify_user_opt failed]
Sep 15 17:08:01 ldap-1 saslauthd[30448]: do_auth : auth
failure: [user=jdoe] [service=imap] [realm=someschool.edu]
[mech=kerberos5] [reason=krb5_verify_user_opt failed]
Sep 15 17:08:04 ldap-1 saslauthd[30450]: do_auth : auth
failure: [user=jdoe] [service=ldap] [realm=someschool.edu
[mech=kerberos5] [reason=krb5_verify_user_opt failed]
On 9/15/05, Buck Huppmann <buckh@pobox.com> wrote:
> On Wed, Sep 14, 2005 at 10:28:13PM -0400, German Shorthair wrote:
>
> > Sep 1 18:19:43 ldap-1 saslauthd[8633]: do_auth : auth
> > failure: [user=jdoe] [service=imap] [realm=someschool.edu]
> ^^^^^^^^^^^^
> do you need a key for this in your keytab
> (and in your realm database), maybe?
>
> --buck
>
> > [root@ldap-1 saslauthd]# /usr/heimdal/sbin/ktutil list
> > FILE:/etc/krb5.keytab:
> >
> > Vno Type Principal
> > 1 des-cbc-md5 ldap/ldap-1.someschool.edu@SOMESCHOOL.EDU
> > 1 des-cbc-md4 ldap/ldap-1.someschool.edu@SOMESCHOOL.EDU
> > 1 des-cbc-crc ldap/ldap-1.someschool.edu@SOMESCHOOL.EDU
> > 1 aes256-cts-hmac-sha1-96 ldap/ldap-1.someschool.edu@SOMESCHOOL.EDU
> > 1 des3-cbc-sha1 ldap/ldap-1.someschool.edu@SOMESCHOOL.EDU
> > 1 arcfour-hmac-md5 ldap/ldap-1.someschool.edu@SOMESCHOOL.EDU
> > 1 des-cbc-md5 host/ldap-1.someschool.edu@SOMESCHOOL.EDU
> > 1 des-cbc-md4 host/ldap-1.someschool.edu@SOMESCHOOL.EDU
> > 1 des-cbc-crc host/ldap-1.someschool.edu@SOMESCHOOL.EDU
> > 1 aes256-cts-hmac-sha1-96 host/ldap-1.someschool.edu@SOMESCHOOL.EDU
> > 1 des3-cbc-sha1 host/ldap-1.someschool.edu@SOMESCHOOL.EDU
> > 1 arcfour-hmac-md5 host/ldap-1.someschool.edu@SOMESCHOOL.EDU
>