Article 6Q37K KRB5KDC_ERR_PREAUTH_FAILED : RHEL9 Application using Kerberos auth fails using AD Service Principal

KRB5KDC_ERR_PREAUTH_FAILED : RHEL9 Application using Kerberos auth fails using AD Service Principal

by
henleyrth
from LinuxQuestions.org on (#6Q37K)
AWS, RHEL9 AMI, application is failing Kerberos Authentication when building a connection to SQL Server, tcpdump and wireshark capture the error as "KRB5KDC_ERR_PREAUTH_FAILED". SPN has been created in AD, krb5.keytab created against the SPN and in place on the application server, krb5.conf file configure correctly at the guidance of the Application support team. I am able to obtain a kerberos ticket via kinit. Have verified the proper encryption algo is being used on both sides of the connection. Chronyd has time synchronized within drift limits. Appreciate any guidance if anyone has implemented something like this before.
External Content
Source RSS or Atom Feed
Feed Location https://feeds.feedburner.com/linuxquestions/latest
Feed Title LinuxQuestions.org
Feed Link https://www.linuxquestions.org/questions/
Reply 0 comments