View source for MIT Kerberos

[http://web.mit.edu/Kerberos/ MIT Kerberos] 

{{Logging_Outputs}}

MIT <tt>krb5kdc</tt> provided by <tt>krb5-kdc-1.4.4-7etch6</tt> (debian)

The following log excerpts include an attempt to authenticate using an invalid principal, followed by an attempt to authenticate using a valid principal with an incorrect password, followed by successful authentication and issue of a ticket granting ticket.

<pre>
Feb 11 23:48:27 hostname krb5kdc[19386]: AS_REQ (7 etypes {18 17 16 23 1 3 2}) 192.168.2.2: CLIENT_NOT_FOUND: nonexistentuser@REALM.LOCAL for krbtgt/REALM.LOCAL@REALM.LOCAL, Client not found in Kerberos database

Feb 11 23:48:58 hostname krb5kdc[19386]: AS_REQ (7 etypes {18 17 16 23 1 3 2}) 192.168.2.2: NEEDED_PREAUTH: validuserbadpasswd@REALM.LOCAL for krbtgt/REALM.LOCAL@REALM.LOCAL, Additional pre-authentication required
Feb 11 23:48:58 hostname krb5kdc[19386]: preauth (timestamp) verify failure: Decrypt integrity check failed
Feb 11 23:48:58 hostname krb5kdc[19386]: AS_REQ (7 etypes {18 17 16 23 1 3 2}) 192.168.2.2: PREAUTH_FAILED: validuserbadpasswd@REALM.LOCAL for krbtgt/REALM.LOCAL@REALM.LOCAL, Decrypt integrity check failed

Feb 11 23:49:07 hostname krb5kdc[19386]: AS_REQ (7 etypes {18 17 16 23 1 3 2}) 192.168.2.2: NEEDED_PREAUTH: validuserokpasswd@REALM.LOCAL for krbtgt/REALM.LOCAL@REALM.LOCAL, Additional pre-authentication required
Feb 11 23:49:07 hostname krb5kdc[19386]: AS_REQ (7 etypes {18 17 16 23 1 3 2}) 192.168.2.2: ISSUE: authtime 1234414147, etypes {rep=16 tkt=16 ses=16}, validuserokpasswd@REALM.LOCAL for krbtgt/REALM.LOCAL@REALM.LOCAL
</pre>


{{Failregex}}

The following regular expression matches common authentication <span class="plainlinks">[http://www.supplementstoweightloss.com/ <span style="color:black;font-weight:normal; text-decoration:none!important; background:none!important; text-decoration:none;">weight loss pills</span>] failures of MIT's <tt>krb5kdc</tt> when principals are configured with pre-authentication required.  The pattern is MIT implementation specific and is not likely to work with <span class="plainlinks">[http://www.shoppharmacycounter.com/ <span style="color:black;font-weight:normal; text-decoration:none!important; background:none!important; text-decoration:none;">weight loss pills</span>] Heimdal.

<pre>
failregex = AS_REQ \([\w\s{}]+\) <HOST>: (PREAUTH_FAILED|CLIENT_NOT_FOUND):
</pre>


[[Category:Kerberos]]