Re: "shishi user SERVICE" borked?

[Elrond]

On Sat, Apr 22, 2006 at 01:03:41PM +0200, Simon Josefsson wrote:
[...]
> What's the error in the KDC log?

I posted that in the original mail:

Failed to verify checksum: Decrypt integrity check failed
Failed to verify authenticator: Decrypt integrity check failed
sending 81 bytes to IPv4:127.0.0.1


> Can you re-try the same query a few times?  I recall problems with
> negative ASN.1 integers in some field that contain random data.
> Sometimes the random data result in a negative ASN.1 integer, and
> there was some problem in handling them.  If the same request works
> only sometimes, then this may be the cause.

After 32 UNsuccessful tries my boxes entropy got scarce.



[...]
> Let's start with the w2k3-kdc -v -v -v -v logs for a working TGT
> request, and then one for a service ticket that fails.  Run 'shishi
> -d' before, to make sure there aren't any old tickets around.

Okay, give me a few minutes.


    Elrond