Article View: aus.computers.linux
Article #55169Re: Kerberos and Kinit
From: David Z. Maze
Date: Sun, 13 Jul 1997 00:00
Date: Sun, 13 Jul 1997 00:00
52 lines
3245 bytes
3245 bytes
On 13 Jul 1997 05:08:59 GMT, "Douglas Garstang" <dgarsta1@c2.telstra-mm.net.au> said:
DG> When I run the kinit program thus:
DG>
DG> ./kinit dgarsta1@c2.telstra-mm.net.au
DG>
DG> I get:
DG>
DG> kinit: Cannot find KDC for requested realm while getting initial
DG> credentials
('strings' shows this error message in /usr/kerberos/lib/libkrb5.so on
my system. So you're using a krb5 kinit.)
DG> Here is my /etc/athena/krb5.conf file:
DG> C2.TELSTRA-MM.NET.AU
DG> C2.TELSTRA-MM.NET.AU dce-server.c2.telstra-mm.net.au admin server
DG> WFH.C2.TELSTRA-MM.NET.AU dce-server.c2.telstra-mm.net.au admin server
DG> WFH1.C2.TELSTRA-MM.NET.AU dce-server.c2.telstra-mm.net.au admin server
DG> WFH2.C2.TELSTRA-MM.NET.AU dce-server.c2.telstra-mm.net.au admin server
DG> WFH3.C2.TELSTRA-MM.NET.AU dce-server.c2.telstra-mm.net.au admin server
DG> WFH4.C2.TELSTRA-MM.NET.AU dce-server.c2.telstra-mm.net.au admin server
DG> WFH5.C2.TELSTRA-MM.NET.AU dce-server.c2.telstra-mm.net.au admin server
This looks more like a Kerberos IV configuration file than a krb5
config file. If you really are running Kerberos V, then the first few
lines of your /etc/krb5.conf file would look more like mine:
[libdefaults]
default_realm = ATHENA.MIT.EDU
...
From here it should be intuitively obvious how to fix it. :-)
DG> Here is my /etc/athena/krb5.realms file:
DG> homer.c2.telstra-mm.net.au C2.TELSTRA-MM.NET.AU
DG> c2.telstra-mm.net.au C2.TELSTRA-MM.NET.AU
There's a [realms] section in /etc/krb5.conf but no krb5.realms file.
Are you _sure_ you're running Kerberos V? Given the names and formats
of the files and the fact that they're in an /etc/athena directory it
sounds much more like krb4. Try installing the default configuration
files from the krb5 distribution and then modifying them for your
local realm.
--
_____________________________
/ \ "We can write all we know in 4 lines."
| David Maze | -- Ray Ashoori, MIT Physics Professor
| dmaze@mit.edu | 1 + 1 = 3 6 * 9 = 42
| http://donut.mit.edu/dmaze/ | IHTFP 17 Yellow Pigs
\_____________________________/ ...the Institute is your friend...
Technical Details
Message-ID:
<m2lo3bw0ty.fsf@donut.mit.edu>Path:
arc1-ca.pugleaf.net!unknown!not-for-mailReferences:
<01bc8f53$424f92e0$e736c018@douglasg.c2.telstra-mm.net.au>Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: 1103af,28838bb38d247cdf X-Google-Attributes: gid1103af,public X-Google-Thread: 10952f,28838bb38d247cdf X-Google-Attributes: gid10952f,public X-Google-Thread: ff723,28838bb38d247cdf X-Google-Attributes: gidff723,public X-Google-Thread: 10bf19,28838bb38d247cdf X-Google-Attributes: gid10bf19,public X-Google-Thread: 102983,28838bb38d247cdf X-Google-Attributes: gid102983,public From: dmaze@donut.mit.edu (David Z. Maze) Subject: Re: Kerberos and Kinit Date: 1997/07/13 Message-ID: <m2lo3bw0ty.fsf@donut.mit.edu> X-Deja-AN: 256608839 X-Zippy: HOW could a GLASS be YELLING?? References: <01bc8f53$424f92e0$e736c018@douglasg.c2.telstra-mm.net.au> To: "Douglas Garstang" <dgarsta1@c2.telstra-mm.net.au> Organization: Massachvsetts Institvte of Technology X-URL: http://donut.mit.edu/dmaze/ X-Attribution: DZM Newsgroups: aus.computers.linux,comp.os.linux.misc,comp.protocols.kerberos,comp.security.misc,comp.security.unix