java 1.5 KINIT error

classic Classic list List threaded Threaded
4 messages Options
Reply | Threaded
Open this post in threaded view
|

java 1.5 KINIT error

FM-4
Hello,

I'm trying to use kinit with kerberos but :
 > bin/kinit user@REALM

Password for userf@REALM:password
Exception: krb_error 31 Integrity check on decrypted field failed (31)
Integrity check on decrypted field failed
KrbException: Integrity check on decrypted field failed (31)
        at sun.security.krb5.internal.crypto.v.b(DashoA12275:154)
        at sun.security.krb5.internal.crypto.v.b(DashoA12275:125)
        at sun.security.krb5.EncryptedData.decrypt(DashoA12275:157)
        at sun.security.krb5.KrbAsRep.<init>(DashoA12275:82)
        at sun.security.krb5.KrbAsReq.getReply(DashoA12275:345)
        at sun.security.krb5.KrbAsReq.getReply(DashoA12275:303)
        at sun.security.krb5.internal.tools.Kinit.<init>(DashoA12275:252)
        at sun.security.krb5.internal.tools.Kinit.main(DashoA12275:106)

Is someone using java + kerberos ?

Thanks !
________________________________________________
Kerberos mailing list           [hidden email]
https://mailman.mit.edu/mailman/listinfo/kerberos
Reply | Threaded
Open this post in threaded view
|

Re: java 1.5 KINIT error

Russ Allbery
FM <[hidden email]> writes:

> I'm trying to use kinit with kerberos but :
>> bin/kinit user@REALM

> Password for userf@REALM:password
> Exception: krb_error 31 Integrity check on decrypted field failed (31)
> Integrity check on decrypted field failed
> KrbException: Integrity check on decrypted field failed (31)
>        at sun.security.krb5.internal.crypto.v.b(DashoA12275:154)
>        at sun.security.krb5.internal.crypto.v.b(DashoA12275:125)
>        at sun.security.krb5.EncryptedData.decrypt(DashoA12275:157)
>        at sun.security.krb5.KrbAsRep.<init>(DashoA12275:82)
>        at sun.security.krb5.KrbAsReq.getReply(DashoA12275:345)
>        at sun.security.krb5.KrbAsReq.getReply(DashoA12275:303)
>        at sun.security.krb5.internal.tools.Kinit.<init>(DashoA12275:252)
>        at sun.security.krb5.internal.tools.Kinit.main(DashoA12275:106)

Sounds like the problem described at:

http://archives.java.sun.com/cgi-bin/wa?A2=ind0212&L=java-security&F=&S=&P=802

in which case try the fix at:

http://archives.java.sun.com/cgi-bin/wa?A2=ind0212&L=java-security&D=0&P=1130

--
Russ Allbery ([hidden email])             <http://www.eyrie.org/~eagle/>
________________________________________________
Kerberos mailing list           [hidden email]
https://mailman.mit.edu/mailman/listinfo/kerberos
Reply | Threaded
Open this post in threaded view
|

Re: java 1.5 KINIT error

Douglas E. Engert
So is this really the problem that java does not do the pre-auth
correctly assuming it knows the salt rather then using the salt returned
by the KDC? Java 1.6 has a fix for this.

Russ Allbery wrote:

> FM <[hidden email]> writes:
>
>
>>I'm trying to use kinit with kerberos but :
>>
>>>bin/kinit user@REALM
>
>
>>Password for userf@REALM:password
>>Exception: krb_error 31 Integrity check on decrypted field failed (31)
>>Integrity check on decrypted field failed
>>KrbException: Integrity check on decrypted field failed (31)
>>       at sun.security.krb5.internal.crypto.v.b(DashoA12275:154)
>>       at sun.security.krb5.internal.crypto.v.b(DashoA12275:125)
>>       at sun.security.krb5.EncryptedData.decrypt(DashoA12275:157)
>>       at sun.security.krb5.KrbAsRep.<init>(DashoA12275:82)
>>       at sun.security.krb5.KrbAsReq.getReply(DashoA12275:345)
>>       at sun.security.krb5.KrbAsReq.getReply(DashoA12275:303)
>>       at sun.security.krb5.internal.tools.Kinit.<init>(DashoA12275:252)
>>       at sun.security.krb5.internal.tools.Kinit.main(DashoA12275:106)
>
>
> Sounds like the problem described at:
>
> http://archives.java.sun.com/cgi-bin/wa?A2=ind0212&L=java-security&F=&S=&P=802
>
> in which case try the fix at:
>
> http://archives.java.sun.com/cgi-bin/wa?A2=ind0212&L=java-security&D=0&P=1130
>

--

  Douglas E. Engert  <[hidden email]>
  Argonne National Laboratory
  9700 South Cass Avenue
  Argonne, Illinois  60439
  (630) 252-5444
________________________________________________
Kerberos mailing list           [hidden email]
https://mailman.mit.edu/mailman/listinfo/kerberos
Reply | Threaded
Open this post in threaded view
|

Re: java 1.5 KINIT error

FM-4
In reply to this post by Russ Allbery
Well !
It worked but having to delete and recreate all principals is very
painful !!!
Anyway it works, I'll have to deal with my users now ;-)

Thank you !!!


Russ Allbery wrote:

>FM <[hidden email]> writes:
>
>  
>
>>I'm trying to use kinit with kerberos but :
>>    
>>
>>>bin/kinit user@REALM
>>>      
>>>
>
>  
>
>>Password for userf@REALM:password
>>Exception: krb_error 31 Integrity check on decrypted field failed (31)
>>Integrity check on decrypted field failed
>>KrbException: Integrity check on decrypted field failed (31)
>>       at sun.security.krb5.internal.crypto.v.b(DashoA12275:154)
>>       at sun.security.krb5.internal.crypto.v.b(DashoA12275:125)
>>       at sun.security.krb5.EncryptedData.decrypt(DashoA12275:157)
>>       at sun.security.krb5.KrbAsRep.<init>(DashoA12275:82)
>>       at sun.security.krb5.KrbAsReq.getReply(DashoA12275:345)
>>       at sun.security.krb5.KrbAsReq.getReply(DashoA12275:303)
>>       at sun.security.krb5.internal.tools.Kinit.<init>(DashoA12275:252)
>>       at sun.security.krb5.internal.tools.Kinit.main(DashoA12275:106)
>>    
>>
>
>Sounds like the problem described at:
>
>http://archives.java.sun.com/cgi-bin/wa?A2=ind0212&L=java-security&F=&S=&P=802
>
>in which case try the fix at:
>
>http://archives.java.sun.com/cgi-bin/wa?A2=ind0212&L=java-security&D=0&P=1130
>
>  
>
________________________________________________
Kerberos mailing list           [hidden email]
https://mailman.mit.edu/mailman/listinfo/kerberos