Groups | Search | Server Info | Login | Register


Groups > comp.protocols.kerberos > #5418

[validate_tgt] (0x0020): [RID#988] TGT failed verification using key for

From Marco Moock <mm@dorfdsl.de>
Newsgroups comp.protocols.kerberos
Subject [validate_tgt] (0x0020): [RID#988] TGT failed verification using key for
Date 2025-06-20 17:44 +0200
Organization TNet Consulting
Message-ID <mailman.199.1750696884.2322.kerberos@mit.edu> (permalink)
References <20250618093205.1f6da8ef@rlcp-nb-5642.prosis.group>

Show all headers | View raw


Hello!

I want to attach a Fedora 42 system to MS AD. sssd seems to work as I
can retrieve user info from AD. Although, login on my system fails and
I get the following message in /var/log/sssd/krb5_child.log:

   *  (2025-06-18  8:02:33): [krb5_child[137885]] [validate_tgt]
     (0x0020): [RID#988] TGT failed verification using key for
     [redacted HOSTNAME]. ********************** BACKTRACE DUMP ENDS
     HERE *********************************

(2025-06-18  8:02:33): [krb5_child[137885]] [get_and_save_tgt]
(0x0020): [RID#988] 2359: [-1765328339][Service key not available]
(2025-06-18  8:02:33): [krb5_child[137885]] [map_krb5_error] (0x0040):
[RID#988] 2443: [-1765328339][Service key not available]
********************** PREVIOUS MESSAGE WAS TRIGGERED BY THE FOLLOWING
BACKTRACE:
   *  (2025-06-18  8:02:33): [krb5_child[137885]] [get_and_save_tgt]
(0x0020): [RID#988] 2359: [-1765328339][Service key not available]
   *  (2025-06-18  8:02:33): [krb5_child[137885]] [map_krb5_error]
(0x0040): [RID#988] 2443: [-1765328339][Service key not available]
********************** BACKTRACE DUMP ENDS HERE
*********************************

Can someone give a hint were to look for the problem?

-- 
kind regards
Marco

Back to comp.protocols.kerberos | Previous | NextPrevious in thread | Find similar


Thread

[validate_tgt] (0x0020): [RID#988] TGT failed verification using key for Marco Moock <mm@dorfdsl.de> - 2025-06-18 09:32 +0200
  Re: [validate_tgt] (0x0020): [RID#988] TGT failed verification using key for Marco Moock <mm@dorfdsl.de> - 2025-06-23 08:04 +0200
  [validate_tgt] (0x0020): [RID#988] TGT failed verification using key for Marco Moock <mm@dorfdsl.de> - 2025-06-20 17:44 +0200

csiph-web