hi @JQUIROS the command to create the entry was: add_entry -password -p HTTP/hostname@DOMAIN.LOCAL -k 1 -e rc4-hmac then export the keytab with the command: wkt http.keytab and then to validate the tiker the command: KRB5_TRACE=/dev/stdout kinit -kt http.keytab HTTP/hostname@DOMAIN.LOCAL presented the error: Getting initial credentials for HTTP/hostname@DOMAIN.LOCALLooked up etypes in keytab: rc4-hmac Sending unauthenticated request Sending request (237 bytes) to DOMAIN.LOCAL Sending initial UDP request to dgram 172.22.22.22:88 Received answer (229 bytes) from dgram 172.22.22.22:88 Response was from master KDC Received error from KDC: -1765328359/Additional pre-authentication required Preauthenticating using KDC method data Processing preauth types: PA-PK-AS-REQ (16), PA-PK-AS-REP_OLD (15), PA-ETYPE-INFO2 (19), PA-ENC-TIMESTAMP (2) Selected etype info: etype rc4-hmac, salt "", params "" Retrieving HTTP/hostname@DOMAIN.LOCAL from FILE:http.keytab (vno 0, enctype rc4-hmac) with result: 0/Success AS key obtained for encrypted timestamp: rc4-hmac/20C1 Encrypted timestamp (for 1661441475.76781): plain 301AA011199992303232BED, encrypted 3625254347B405C2739999992C5C50F451C0A477AE3AD421DF Preauth module encrypted_timestamp (2) (real) returned: 0/Success Produced preauth for next request: PA-ENC-TIMESTAMP (2) Sending request (313 bytes) to DOMAIN.LOCAL Sending initial UDP request to dgram 172.22.22.22:88 Received answer (196 bytes) from dgram 172.22.22.22:88 Response was from master KDC Received error from KDC: -1765328360/Preauthentication failed Preauthenticating using KDC method data Processing preauth types: PA-ETYPE-INFO2 (19) Selected etype info: etype rc4-hmac, salt "", params "" kinit: Preauthentication failed while getting initial credentials
... View more
