Re: Failed to verify CMS message: bad signature
Todd Grayson <[email protected]>
| Newsgroups | gmane.comp.encryption.kerberos.general |
|---|---|
| Message-ID | <CALNT6MUEyhS6oJuJiAbQsNMdiLs+9c9vjq2WBqLt1Zbqo8ZX9g@mail.gmail.com> |
The discussions I've seen where this is done successfully use tar to grab all the files (do an ls -la in the kdc path to see what you missed) along with the krb5.conf. I believe you are missing important file(s) based on what you listed. On Wed, Feb 26, 2020, 7:31 AM jarek <[email protected]> wrote: > Hello! > > I've tried to migrate KDC (Debian 7) to new hardware with > Debian 9. > We are using KDC with pkinit and smartcards. > After fresh installation, I have copied /etc/krb5.conf, > /etc/krb5.keytab, /etc/krb5kdc and /var/lib/krb5kdc. > All certificates are in /etc/krb5kdc. > The new machine has the same name as old, only IP is different. > kadmin lists all pricinpals, kdc and admin server are working. > > kinit from remote machine fails, on KDC in authlog we have > message: > > PREAUTH_FAILED: Failed to verify CMS message: bad signature > > What can be wrong ? > > Best regards > Jarek > > ________________________________________________ > Kerberos mailing list [email protected] > https://mailman.mit.edu/mailman/listinfo/kerberos > ________________________________________________ Kerberos mailing list [email protected] https://mailman.mit.edu/mailman/listinfo/kerberos