Skip Menu |
 

To: <krb5-bugs@mit.edu>
From: Glenn Machin <gmachin@sandia.gov>
Subject: Heimdahl Kerberos on MacOSX 10.9.5 using pkinit produces verify error
Date: Sat, 22 Aug 2015 19:56:49 -0600

kinit -C KEYCHAIN -D KEYCHAIN: produces the following error on the KDC:

Aug 22 19:23:35 as36snllx krb5kdc[25098]: preauth (pkinit) verify
failure: error:0D08303A:asn1 encoding
routines:ASN1_TEMPLATE_NOEXP_D2I:nested asn1 error
Aug 22 19:23:35 as36snllx krb5kdc[25098]: AS_REQ (7 etypes {18 17 16 23
3 2 1}) 134.253.253.38: PREAUTH_FAILED: gmachin@dce.sandia.gov for
krbtgt/dce.sandia.gov@dce.sandia.gov, error:0D08303A:asn1 encoding
routines:ASN1_TEMPLATE_NOEXP_D2I:nested asn1 error


KDC is 1-10-3

Is this a known problem?


Any help would be appreciated?


Glenn