Re: "shishi user SERVICE" borked?

[Simon Josefsson]

Elrond <address@hidden> writes:

> On Sat, Apr 22, 2006 at 01:03:41PM +0200, Simon Josefsson wrote:
> [...]
>> What's the error in the KDC log?
>
> I posted that in the original mail:
>
> Failed to verify checksum: Decrypt integrity check failed
> Failed to verify authenticator: Decrypt integrity check failed
> sending 81 bytes to IPv4:127.0.0.1

Thanks.

>> Can you re-try the same query a few times?  I recall problems with
>> negative ASN.1 integers in some field that contain random data.
>> Sometimes the random data result in a negative ASN.1 integer, and
>> there was some problem in handling them.  If the same request works
>> only sometimes, then this may be the cause.
>
> After 32 UNsuccessful tries my boxes entropy got scarce.

3-4 re-tries should be enough, it should be a 50/50 chance each time.

I think this problem was solved before though, but there could be
regressions.

Thanks,
Simon