Author Topic: Kerberos: Failed to decrypt PA-DATA  (Read 3725 times)

vikaskiranjain

  • Zen Apprentice
  • *
  • Posts: 1
  • Karma: +0/-0
    • View Profile
Kerberos: Failed to decrypt PA-DATA
« on: October 11, 2023, 05:20:47 am »
I Have create Ubuntu 20.04 Server and Installed 7.1.0 Zentyal

While i Join Domain with PDC after Joining all User Getting Error


[2023/10/11 08:46:54.321752,  3] ../../source4/auth/kerberos/krb5_init_context.c:80(smb_krb5_debug_wrapper)
  Kerberos: Failed to decrypt PA-DATA -- 55301mntcupppc$@AD.MICROTEK.INTERNAL (enctype arcfour-hmac-md5) error Decrypt integrity check failed
[2023/10/11 08:46:54.321981,  1] ../../source4/dsdb/common/util.c:5617(dsdb_update_bad_pwd_count)
  Locked out user CN=55301MNTCUPPPC,CN=Computers,DC=ad,DC=microtek,DC=internal after 47 wrong passwords


[2023/10/11 08:46:54.272376,  2] ../../auth/auth_log.c:647(log_authentication_event_human_readable)
  Auth: [Kerberos KDC,ENC-TS Pre-authentication] user [(null)]\[55301mntcupppc$@AD.MICROTEK.INTERNAL] at [Wed, 11 Oct 2023 08:46:54.272318 IST] with [arcfour-hmac-md5] status [NT_STATUS_WRONG_PASSWORD] workstation [(null)] remote host [ipv4:192.168.16.89:49756] mapped to [AD]\[55301MNTCUPPPC$]. local host [NULL]
  {"timestamp": "2023-10-11T08:46:54.272543+0530", "type": "Authentication", "Authentication": {"version": {"major": 1, "minor": 2}, "eventId": 4625, "logonId": "32c716a90cb1fb1d", "logonType": 3, "status": "NT_STATUS_WRONG_PASSWORD", "localAddress": null, "remoteAddress": "ipv4:192.168.16.89:49756", "serviceDescription": "Kerberos KDC", "authDescription": "ENC-TS Pre-authentication", "clientDomain": null, "clientAccount": "55301mntcupppc$@AD.MICROTEK.INTERNAL", "workstation": null, "becameAccount": "55301MNTCUPPPC$", "becameDomain": "AD", "becameSid": "S-1-5-21-3489530925-429339997-2783579675-2262", "mappedAccount": "55301MNTCUPPPC$", "mappedDomain": "AD", "netlogonComputer": null, "netlogonTrustAccount": null, "netlogonNegotiateFlags": "0x00000000", "netlogonSecureChannelType": 0, "netlogonTrustAccountSid": null, "passwordType": "arcfour-hmac-md5", "duration": 105149}}
[2023/10/11 08:46:54.272730,  3] ../../source4/auth/kerberos/krb5_init_context.c:80(smb_krb5_debug_wrapper)
  Kerberos: Failed to decrypt PA-DATA -- 55301mntcupppc$@AD.MICROTEK.INTERNAL
[2023/10/11 08:46:54.274237,  3] ../../source4/samba/service_stream.c:67(stream_terminate_connection)