goauthentik / goauthentik/authentik

Kerberos issue - Pre-authentication failed - Incorrect Padding

Open
#16,396 3 comments 0 reactions 0 assignees View on GitHub
question
Dominant language
Python
Stars
25.6k
Forks
2k
Avg merge
1d 1h
Merged PRs (30d)
644

Description

**_Describe your question_**

I am trying to set up Kerberos authentication with authentik. My setup involves a Windows Server with Active Directory (AD), and authentik is running on a docker container. I am encountering the error: "(status: Kerberos error: Pre-authentication failed: Unsupported key table format version number (code: -1765328174))" due to incorrect padding

**_Relevant info_**

Windows Server with Active Directory (AD)
Authentik server running on docker container
Followed steps for SPNEGO setup
Using a custom Kerberos 5 configuration

[libdefaults]
default_realm = REALM.COMPANY

[realms]
REALM.COMPANY = {
kdc = DomainController.realm.company

}

[domain_realm]
.realm.company = REALM.COMPANY
realm.company = REALM.COMPANY

- Selected KAdmin type: "other"
- Keytab file is Base64 generated with the command : ktpass -out authentik.keytab -mapUser AuthentikSvc +rndPass -mapOp set +DumpSalt -crypto ALL -princ HTTP/xxx@REALM.COMPANY

**_Screenshots_**

If applicable, add screenshots to help explain your problem.

_**Logs**_

Image

Image

_**Version and Deployment (please complete the following information):**_

- Deployment: docker-compose
- authentik version: : 2025.8.1]

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.