Decrypt integrity check failed while getting initial ticket

"Stephen Carville (Kerberos List)" <[email protected]> Mon, 9 Dec 2019 10:04:17 -0800

Newsgroups	gmane.comp.encryption.kerberos.general
Message-ID	<[email protected]>

Recently I migrated the kerberos master and one slave to another 
location using tool called "Zerto".  Perhaps coincidentally, replication 
broke with the above error message. I checked that DNS A and PTR records 
for all the servers are correct.  I can get a ticket using kinit (kinit 
-k host/<hostname>). I finally recreated the keytab file 
(/etc/krb5.keytab) and propagated it to the other three servers.  Still 
no replication.

Any suggestions?

BTW, while trying to fix it, I noticed that every time I use ktadd to 
add a key to krb5.keytab the KVNO increments.  Is that normal?

--
Stephen
________________________________________________
Kerberos mailing list           [email protected]
https://mailman.mit.edu/mailman/listinfo/kerberos