Check your krb5kdc.log file for any hint!
Hooshang
On Tue, 26 Oct 2004 16:39:22 -0400, Frank Balluffi
<[EMAIL PROTECTED]> wrote:
> I am able to validate (test) keytab files for service1/[EMAIL PROTECTED] and
> service2/[EMAIL PROTECTED] using the command "kinit -5 -k -t keytab-file
> service-principal" from host1.us.foo.com, but when I try to validate a keytab file
> for service3/[EMAIL PROTECTED] from host1.us.foo.com I get the following error:
>
> kinit(v5): Cannot find KDC for requested realm while getting initial credentials
>
> krb5.conf says:
>
> [realms]
> FOO.COM = {
> kdc = ...foo.com:88
> ...
> }
>
> [domain_realm]
> .foo.com = FOO.COM
>
> Is this behavior expected? Do I need to be "on" a host in .au.foo.com to validate a
> keytab for service3/[EMAIL PROTECTED] Thanks.
>
> Frank
>
> --
>
> This e-mail may contain confidential and/or privileged information. If you are not
> the intended recipient (or have received this e-mail in error) please notify the
> sender immediately and destroy this e-mail. Any unauthorized copying, disclosure or
> distribution of the material in this e-mail is strictly forbidden.
>
> ________________________________________________
> Kerberos mailing list [EMAIL PROTECTED]
> https://mailman.mit.edu/mailman/listinfo/kerberos
>
________________________________________________
Kerberos mailing list [EMAIL PROTECTED]
https://mailman.mit.edu/mailman/listinfo/kerberos
