🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: aus.computers.linux
Article #55169

Re: Kerberos and Kinit

#55169
From: David Z. Maze
Date: Sun, 13 Jul 1997 00:00
52 lines
3245 bytes
On 13 Jul 1997 05:08:59 GMT, "Douglas Garstang" <dgarsta1@c2.telstra-mm.net.au> said:
DG> When I run the kinit program thus:
DG> 
DG> ./kinit dgarsta1@c2.telstra-mm.net.au
DG> 
DG> I get:
DG> 
DG> kinit: Cannot find KDC for requested realm while getting initial
DG> credentials

('strings' shows this error message in /usr/kerberos/lib/libkrb5.so on
my system.  So you're using a krb5 kinit.)

DG> Here is my /etc/athena/krb5.conf file:
DG> C2.TELSTRA-MM.NET.AU
DG> C2.TELSTRA-MM.NET.AU dce-server.c2.telstra-mm.net.au admin server
DG> WFH.C2.TELSTRA-MM.NET.AU dce-server.c2.telstra-mm.net.au admin server
DG> WFH1.C2.TELSTRA-MM.NET.AU dce-server.c2.telstra-mm.net.au admin server
DG> WFH2.C2.TELSTRA-MM.NET.AU dce-server.c2.telstra-mm.net.au admin server
DG> WFH3.C2.TELSTRA-MM.NET.AU dce-server.c2.telstra-mm.net.au admin server
DG> WFH4.C2.TELSTRA-MM.NET.AU dce-server.c2.telstra-mm.net.au admin server
DG> WFH5.C2.TELSTRA-MM.NET.AU dce-server.c2.telstra-mm.net.au admin server

This looks more like a Kerberos IV configuration file than a krb5
config file.  If you really are running Kerberos V, then the first few
lines of your /etc/krb5.conf file would look more like mine:

[libdefaults]
        default_realm = ATHENA.MIT.EDU
	...

From here it should be intuitively obvious how to fix it.  :-)

DG> Here is my /etc/athena/krb5.realms file:
DG> homer.c2.telstra-mm.net.au C2.TELSTRA-MM.NET.AU
DG> c2.telstra-mm.net.au C2.TELSTRA-MM.NET.AU

There's a [realms] section in /etc/krb5.conf but no krb5.realms file.
Are you _sure_ you're running Kerberos V?  Given the names and formats
of the files and the fact that they're in an /etc/athena directory it
sounds much more like krb4.  Try installing the default configuration
files from the krb5 distribution and then modifying them for your
local realm.

-- 
 _____________________________
/                             \  "We can write all we know in 4 lines."
|          David Maze         |   -- Ray Ashoori, MIT Physics Professor
|         dmaze@mit.edu       |      1 + 1 = 3         6 * 9 = 42  
| http://donut.mit.edu/dmaze/ |        IHTFP         17 Yellow Pigs
\_____________________________/     ...the Institute is your friend...
Technical Details
Message-ID: <m2lo3bw0ty.fsf@donut.mit.edu>
Path: arc1-ca.pugleaf.net!unknown!not-for-mail
References: <01bc8f53$424f92e0$e736c018@douglasg.c2.telstra-mm.net.au>

Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: 1103af,28838bb38d247cdf
X-Google-Attributes: gid1103af,public
X-Google-Thread: 10952f,28838bb38d247cdf
X-Google-Attributes: gid10952f,public
X-Google-Thread: ff723,28838bb38d247cdf
X-Google-Attributes: gidff723,public
X-Google-Thread: 10bf19,28838bb38d247cdf
X-Google-Attributes: gid10bf19,public
X-Google-Thread: 102983,28838bb38d247cdf
X-Google-Attributes: gid102983,public
From: dmaze@donut.mit.edu (David Z. Maze)
Subject: Re: Kerberos and Kinit
Date: 1997/07/13
Message-ID: <m2lo3bw0ty.fsf@donut.mit.edu>
X-Deja-AN: 256608839
X-Zippy: HOW could a GLASS be YELLING??
References: <01bc8f53$424f92e0$e736c018@douglasg.c2.telstra-mm.net.au>
To: "Douglas Garstang" <dgarsta1@c2.telstra-mm.net.au>
Organization: Massachvsetts Institvte of Technology
X-URL: http://donut.mit.edu/dmaze/
X-Attribution: DZM
Newsgroups: aus.computers.linux,comp.os.linux.misc,comp.protocols.kerberos,comp.security.misc,comp.security.unix