Hi,
I'm developing a GSSAPI application and wanted to install kerberos to
test/compile it. Unfortunately for the moment I only have a single
machine. I built MIT kerberos (5-1.3.1) from source and installed it
into /opt/kerberos. I want to run both the client and server from this
machine.
Ran:
-> kdb5_util create -r LOCALHOST -s
Added principals to the acl and then added principals to the kerberos
database.
Created the keytab file using "kadmind.local".
Started "kadmind" daemon.
Started "krb5kdc". --> Segmentation fault
-> cat /var/log/krb5kdc.log
Nov 21 14:44:26 localhost.localdomain krb5kdc[4498](info): setting up
network...
I running a modified Fedora Core 1 with kerbel 2.6.0-test9.
Might the problems be caused by trying to run the server on 127.0.0.1?
Are there any ways around this on a standalone machine?
Can anyone help?
Thanks,
Mark.
Configuration files:
/etc/krb5.conf
[logging]
default = FILE:/var/log/krb5libs.log
kdc = FILE:/var/log/krb5kdc.log
admin_server = FILE:/var/log/kadmind.log
[libdefaults]
ticket_lifetime = 24000
default_realm = LOCALHOST
dns_lookup_realm = false
dns_lookup_kdc = false
[realms]
LOCALHOST = {
kdc = localhost:88
admin_server = localhost:749
default_domain = localhost
}
[domain_realm]
localhost = LOCALHOST
.localdomain = LOCALHOST
[kdc]
profile = /opt/kerberos/var/kdc.conf
[appdefaults]
pam = {
debug = false
ticket_lifetime = 36000
renew_lifetime = 36000
forwardable = true
krb4_convert = false
}
-----------------------------------
/opt/kerberos/var/kdc.conf
[kdcdefaults]
kdc_ports = 88,750
[realms]
LOCALHOST = {
database_name = /opt/kerberos/var/krb5kdc/principal
admin_keytab = /opt/kerberos/var/krb5kdc/kadm5.keytab
acl_file = /opt/kerberos/var/krb5kdc/kadm5.acl
dict_file = /opt/kerberos/var/krb5kdc/kadm5.dict
key_stash_file = /opt/kerberos/var/krb5kdc/.k5.ATHENA.MIT.EDU
kadmind_port = 749
max_life = 10h 0m 0s
max_renewable_life = 7d 0h 0m 0s
master_key_type = des3-hmac-sha1
supported_enctypes = des3-hmac-sha1:normal des-cbc-crc:normal
}
________________________________________________
Kerberos mailing list [EMAIL PROTECTED]
https://mailman.mit.edu/mailman/listinfo/kerberos
