AFP548 Changing the world one server at a time.

pre-authentication error messages in kdc.log

Home › Forums › OS X Server and Client Discussion › Open Directory › pre-authentication error messages in kdc.log

Viewing 2 posts - 1 through 2 (of 2 total)
  • Author
    Posts
  • March 27, 2006 at 10:52 pm #365834
    Gary Bernstein
    Participant

    I have recently setup an OD server (connected to the campus AD server) and I currently have 2 computers bound to the AD and OD Server (1 is a server and the other a test work station). I was looking through the logs and I noticed repeating messages and I can’t seem to find what they mean and if I should be concerned.

    Any help would be appreciated.

    from the ldap.log
    Mar 27 16:47:19 ODServ slapd[807]: SASL [conn=7792] Failure: GSSAPI Error: Miscellaneous failure (No principal in keytab matches desired name)\n
    Mar 27 16:47:19 ODServ slapd[807]: SASL [conn=7792] Failure: no user in database\n
    Mar 27 16:49:52 ODServ slapd[807]: SASL [conn=7798] Failure: GSSAPI Error: Miscellaneous failure (No principal in keytab matches desired name)\n
    Mar 27 16:49:52 ODServ slapd[807]: SASL [conn=7798] Failure: no user in database\n

    from the kdc.log:
    Mar 27 16:39:28 ODServ.kcpa.uiuc.edu krb5kdc[227](info): AS_REQ (7 etypes {18 17 16 23 1 3 2}) 128.174.106.XXX: NEEDED_PREAUTH: alfred@ODServ.kcpa.uiuc.edu for krbtgt/ODServ.kcpa.uiuc.edu@ODServ.kcpa.uiuc.edu, Additional pre-authentication required
    Mar 27 16:39:30 ODServ.kcpa.uiuc.edu krb5kdc[227](info): AS_REQ (7 etypes {18 17 16 23 1 3 2}) 128.174.106.XXX: ISSUE: authtime 1143499168, etypes {rep=16 tkt=16 ses=16}, alfred@ODServ.kcpa.uiuc.edu for krbtgt/ODServ.kcpa.uiuc.edu@ODServ.kcpa.uiuc.edu
    Mar 27 16:42:00 ODServ.kcpa.uiuc.edu krb5kdc[227](info): AS_REQ (7 etypes {18 17 16 23 1 3 2}) 128.174.106.XXX: NEEDED_PREAUTH: alfred@ODServ.kcpa.uiuc.edu for krbtgt/ODServ.kcpa.uiuc.edu@ODServ.kcpa.uiuc.edu, Additional pre-authentication required
    Mar 27 16:42:02 ODServ.kcpa.uiuc.edu krb5kdc[227](info): AS_REQ (7 etypes {18 17 16 23 1 3 2}) 128.174.106.XXX: ISSUE: authtime 1143499320, etypes {rep=16 tkt=16 ses=16}, alfred@ODServ.kcpa.uiuc.edu for krbtgt/ODServ.kcpa.uiuc.edu@ODServ.kcpa.uiuc.edu
    Mar 27 16:44:18 ODServ.kcpa.uiuc.edu krb5kdc[227](info): AS_REQ (7 etypes {18 17 16 23 1 3 2}) 128.174.106.XXX: NEEDED_PREAUTH: alfred@ODServ.kcpa.uiuc.edu for krbtgt/ODServ.kcpa.uiuc.edu@ODServ.kcpa.uiuc.edu, Additional pre-authentication required
    Mar 27 16:44:19 ODServ.kcpa.uiuc.edu krb5kdc[227](info): AS_REQ (7 etypes {18 17 16 23 1 3 2}) 128.174.106.XXX: ISSUE: authtime 1143499458, etypes {rep=16 tkt=16 ses=16}, alfred@ODServ.kcpa.uiuc.edu for krbtgt/ODServ.kcpa.uiuc.edu@ODServ.kcpa.uiuc.edu

    March 28, 2006 at 1:42 am #365836
    Gary Bernstein
    Participant

    So, I can safely ignore this?

    It seems like this is going to fill up my server logs….

  • Author
    Posts
Viewing 2 posts - 1 through 2 (of 2 total)
  • You must be logged in to reply to this topic.