Return
-
Title
Unable to login. KRB5KDC_ERR_PREAUTH_FAILED (-1765328360): Preauthentication failed. Kerberos pre auth error. Access denied. -
Description
Unable to login getting access denied. Kerberos pre auth error 1765328360.
The following showed up in /var/logs/secure before the password was entered: DATE MACHINENAME sshd[26111]: pam_vas: Authentication for user: account: service: reason:Caused by: KRB5KDC_ERR_PREAUTH_FAILED (-1765328360): Preauthentication failedOnce password is entered Access denied message occurs and the user is then prompted to enter the password again.The following settings were set in the sshd_conf file:
PermitEmptyPasswords=yesChallengeResponseAuthentication=noPasswordAuthentication=yes -
Cause
Product defect: 770132
Fix Description from changelog.txt:
* vasd/auth: Fix an authentication issue with sshd_config PermitEmptyPasswordsenabled preventing logins until a user checkaccess is ran. -
Resolution
TESTING IN PRODUCTION:
/usr/sbin/sshd -p 2020 -ddd -o PermitEmptyPasswords=no
ssh -p 2020 <user@system>This way you don't have to manually modify sshd_config and restart sshd.Please note this will only set the option for that session.WORKAROUND:
1 - Edit the sshd_config file
Change "PermitEmptyPasswords" from "yes" to "no"
2 - Restart sshd
STATUS:
Product defect fixed in 4.1.5.23406
RESOLUTION:Upgrade to a newer version of Authentication Services.
To download the latest release click here.
-
Change Request
770132