Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

Bug#527353: GSS consistently fails with: Decrypt integrity check failed

42 views
Skip to first unread message

Eric Dorland

unread,
May 7, 2009, 2:20:08 AM5/7/09
to
Package: libgssapi-krb5-2
Version: 1.7dfsg~beta1-3
Severity: grave

Happy to provide more diagnostics but not entirely certain where to look. The
latest upgrade broke ssh and offlineimap.

from ssh:

debug1: Next authentication method: gssapi-keyex
debug1: No valid Key exchange context
debug1: Next authentication method: gssapi-with-mic
debug1: Unspecified GSS failure. Minor code may provide more information
Decrypt integrity check failed

debug1: Unspecified GSS failure. Minor code may provide more information
Decrypt integrity check failed

debug1: Unspecified GSS failure. Minor code may provide more information


from offlineimap:

Account sync kuroneko:
DEBUG[imap]: Unspecified GSS failure. Minor code may provide more information: Decrypt integrity check failed

klist:

Credentials cache: FILE:/tmp/krb5cc_1000_Il7029
Principal: er...@KURONEKO.CA

Issued Expires Principal
May 7 02:05:44 May 7 12:02:03 krbtgt/KURON...@KURONEKO.CA

-- System Information:
Debian Release: squeeze/sid
APT prefers unstable
APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.29-1-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages libgssapi-krb5-2 depends on:
ii libc6 2.9-10 GNU C Library: Shared libraries
ii libcomerr2 1.41.5-1 common error description library
ii libk5crypto3 1.7dfsg~beta1-3 MIT Kerberos runtime libraries - C
ii libkeyutils1 1.2-10 Linux Key Management Utilities (li
ii libkrb5-3 1.7dfsg~beta1-3 MIT Kerberos runtime libraries
ii libkrb5support0 1.7dfsg~beta1-3 MIT Kerberos runtime libraries - S

libgssapi-krb5-2 recommends no packages.

Versions of packages libgssapi-krb5-2 suggests:
pn krb5-doc <none> (no description available)
pn krb5-user <none> (no description available)

-- no debconf information

--
To UNSUBSCRIBE, email to debian-bugs-...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listm...@lists.debian.org

Sam Hartman

unread,
May 7, 2009, 9:30:14 PM5/7/09
to
>>>>> "Eric" == Eric Dorland <er...@debian.org> writes:
Eric> Client is up2date unstable, and where I reported the bug.

Eric> Server is debian stable, running the heimdal kdc, version
Eric> 1.2.dfsg.1-2.1. It doesn't have libgssapi-krb5-2 and
Eric> libkrb5-3 installed.

OK. I believe that 1.7dfsg~beta1-4 should fix your problem.

0 new messages