In the meantime I set-up an entirely new box, based on Ubuntu 64 bit instead of Debian 32 bit. And now I'm encountering the same issues there (same version of the packages, so no major suprise there).
What I tried: ============= * I used ktutil to reduce the entries in my keytab. Nice tool. I'm down to two entries, and with that shortened keytab it's working OK on my old machine (1.8.3+dfsg-4squeeze6) but not on the new one. # klist -ke /etc/krb5.keytab Keytab name: WRFILE:/etc/krb5.keytab KVNO Principal ---- -------------------------------------------------------------------------- 1 host/vpn-gw.charite...@charite.de (DES cbc mode with CRC-32) 1 openvpn-krb5/vpn-gw.charite...@charite.de (DES cbc mode with CRC-32) The same command on the new box (1.10+dfsg~beta1-2ubuntu0.3) gives: # klist -ke /etc/krb5.keytab Keytab name: FILE:/etc/krb5.keytab KVNO Principal ---- -------------------------------------------------------------------------- 1 host/vpn-gw.charite...@charite.de (des-cbc-crc) 1 openvpn-krb5/vpn-gw.charite...@charite.de (des-cbc-crc) * I built t_vfy_increds according to your instructions: # KRB5_TRACE=/tmp/krb5_tracefile.txt ./t_vfy_increds t_vfy_increds: ../../../../src/lib/krb5/krb/t_vfy_increds.c:48: main: Assertion krb5_cc_start_seq_get(context, ccache, &cursor) == 0' failed. Aborted (core dumped) And no trace file either. -- Ralf Hildebrandt Charite Universitätsmedizin Berlin ralf.hildebra...@charite.de Campus Benjamin Franklin http://www.charite.de Hindenburgdamm 30, 12203 Berlin Geschäftsbereich IT, Abt. Netzwerk fon: +49-30-450.570.155 -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org