goauthentik / goauthentik/authentik
Kerberos issue - Pre-authentication failed - Incorrect Padding
- Dominant language
- Python
- Stars
- 25.6k
- Forks
- 2k
- Avg merge
- 1d 1h
- Merged PRs (30d)
- 644
Description
**_Describe your question_**
I am trying to set up Kerberos authentication with authentik. My setup involves a Windows Server with Active Directory (AD), and authentik is running on a docker container. I am encountering the error: "(status: Kerberos error: Pre-authentication failed: Unsupported key table format version number (code: -1765328174))" due to incorrect padding
**_Relevant info_**
Windows Server with Active Directory (AD)
Authentik server running on docker container
Followed steps for SPNEGO setup
Using a custom Kerberos 5 configuration
[libdefaults]
default_realm = REALM.COMPANY
[realms]
REALM.COMPANY = {
kdc = DomainController.realm.company
}
[domain_realm]
.realm.company = REALM.COMPANY
realm.company = REALM.COMPANY
- Selected KAdmin type: "other"
- Keytab file is Base64 generated with the command : ktpass -out authentik.keytab -mapUser AuthentikSvc +rndPass -mapOp set +DumpSalt -crypto ALL -princ HTTP/xxx@REALM.COMPANY
**_Screenshots_**
If applicable, add screenshots to help explain your problem.
_**Logs**_
_**Version and Deployment (please complete the following information):**_
- Deployment: docker-compose
- authentik version: : 2025.8.1]
Contributor guide
Assessment
This issue has not been assessed yet.