[OpenAFS] kaserver.DB0 converted, no success authenticating
   
    Ken Hornstein
     
    kenh@cmf.nrl.navy.mil
       
    Mon, 29 Oct 2007 13:21:39 -0400
    
    
  
>Oct 29 12:58:13 silmaril krb5kdc[13245](info): AS_REQ (7 etypes {18 17
>16 23 1 3 2}) xxx.xx.11.213: DECRYPT_CLIENT_KEY: jblaine@RCF.FOO.COM for
>krbtgt/RCF.FOO.COM@RCF.FOO.COM, Decrypt integrity check failed
One little thing I always forget about afs2k5db .... it currently only
works if your master key is single-DES (in theory this isn't hard to fix,
but see previous comments about time, interest, etc etc).  Judging by
this error, the client keys are not encrypted properly in the database.
I am guessing that your K/M principal is something other than single-DES.
--Ken