Introduction
Problem
When setting up the Kerberos authentication method in Vault, on a number of occasions the "KDC did not respond appropriately to FAST negotiation" error might be observed.
Prerequisites
- Vault server
- KDC
- Kerberos authentication method in Vault
Cause
-
When configuring the Kerberos authentication method the "KDC did not respond appropriately to FAST negotiation" error is observed.
Overview of possible solutions
Solutions:
- In order to work around this issue, the disable_fast_negotiation parameter should be set to "true" when performing login via the Kerberos authentication method.
Outcome
- Setting the disable_fast_negotiation parameter to "true" disables the FAST negotiation in the Kerberos protocol.