On 6/1/2011 1:03 AM, Lee Eric wrote: > Hi, > > It seems aklog cannot work well in my server. > > > [root@server ~]# klist > Ticket cache: FILE:/tmp/krb5cc_0 > Default principal: admin@HERDINGCAT.INTERNAL > > Valid starting Expires Service principal > 06/01/11 00:55:12 06/02/11 00:55:10 > krbtgt/HERDINGCAT.INTERNAL@HERDINGCAT.INTERNAL > renew until 06/01/11 00:55:12 > [root@server ~]# aklog -d -c herdingcat.internal > Authenticating to cell herdingcat.internal (server > server.herdingcat.internal). > Trying to authenticate to user's realm HERDINGCAT.INTERNAL. > Getting tickets: afs/herdingcat.internal@HERDINGCAT.INTERNAL > Kerberos error code returned by get_cred : -1765328370
-1765328370 = KDC has no support for encryption type In other words, your KDC has support for DES-CBC-CRC turned off. Re-enable support for DES encryption types and you will get further. Jeffrey Altman
signature.asc
Description: OpenPGP digital signature
