KRB5KDC_ERR_PREAUTH_FAILED : RHEL9 Application using Kerberos auth fails using AD Service Principal
by henleyrth from LinuxQuestions.org on (#6Q37K)
AWS, RHEL9 AMI, application is failing Kerberos Authentication when building a connection to SQL Server, tcpdump and wireshark capture the error as "KRB5KDC_ERR_PREAUTH_FAILED". SPN has been created in AD, krb5.keytab created against the SPN and in place on the application server, krb5.conf file configure correctly at the guidance of the Application support team. I am able to obtain a kerberos ticket via kinit. Have verified the proper encryption algo is being used on both sides of the connection. Chronyd has time synchronized within drift limits. Appreciate any guidance if anyone has implemented something like this before.