krb_error 41 when performing kinit test

book

Article ID: 160283

calendar_today

Updated On:

Products

Data Loss Prevention Enforce

Issue/Introduction

New installation of Data Loss Prevention (DLP).  I have configured the Microsoft Active Directory authentication per the Administration guide.  When I do a test with the kinit command I get

Exception: krb_error 41 Message stream modified (41) Message stream modified
KrbException: Message stream modified (41)
...

I can log into a windows machine on the domain so I know the user and password is correct.  In the krb5.ini file the domain are capitalized so what is wrong?

Resolution

Check to make sure that the Fully Qualified Domain Names are being used, not an alias or a shortened version of the name. If the domain name (host) is used instead of the FQDN, it will cause the error 41.

If correcting the domain names does not resolve your issue, contact technical support.