On 05/07/2012 11:38 AM, Berthold Cogel wrote: > -rw------- 1 root root 128 May 7 16:09 service.keyfile
> [root@hydra krb5kdc]# kadmin.local > kadmin.local: unable to get default realm I'm not sure why kadmin.local wouldn't be reading your krb5.conf file (partly because krb5 1.6 was a long time ago). Does strace show it trying to open anything other than kdc.conf? > [root@hydra krb5kdc]# kadmin.local -r EXAMPLE.UNI-KOELN.DE > Authenticating as principal root/ad...@example.uni-koeln.de with password. > kadmin.local: Invalid argument while initializing kadmin.local interface I've most commonly seen this error when: (1) There was something in service.keyfile before kdb5_ldap_util stashsrvpw was run. Usually a copy of the master key stash due to admin confusion. (2) kdb5_ldap_util stashsrvpw appends rather than replacing the stash file (I assume so that you can iteratively stash multiple passwords). (3) The LDAP module gives an unhelpful error message when it detects a malformed service.keyfile. Anyway, try deleting service.keyfile, re-running kdb5_ldap_util stashsrvpw, and trying again. ________________________________________________ Kerberos mailing list Kerberos@mit.edu https://mailman.mit.edu/mailman/listinfo/kerberos