Re: HELP!!! I am also having the kpropd problem
On 11 Mar, 20:17, Andrea <[EMAIL PROTECTED]> wrote: > On 11 Mar, 08:46, [EMAIL PROTECTED] wrote: > > > > > Hi, > > > Okay... I think I've found the issue. Apparently there is a problem when > > running kpropd from inetd. A little googling turned up others that have > > had thie same issue. This is probably a side effect of the fork/exec by > > inetd. Does anyone know if there is already a bug open for this? > > > Thanks, > > -G > > > Jason Edgecombe <[EMAIL PROTECTED]> > > 03/10/2008 08:46 PM > > > To > > [EMAIL PROTECTED] > > cc > > [EMAIL PROTECTED] > > Subject > > Re: HELP!!! I am also having the kpropd problem > > > [EMAIL PROTECTED] wrote: > > > Hi, > > > > I tried copying the krb5kdc directory to the slave. I get the same > > result > > > (Decrypt integrity check failed while getting initial ticket). Is there > > > something else I could try? > > > > Thanks, > > > -G > > > "Decrypt integrity check failed" usually means that the password is wrong. > > > Jason > > The problem sounds that there is some problem with the key stash file > that allows authenticating on the db for the propagation. > > Be sure that the kdc.conf, and then be sure that the kdc is correctly > reading the proper kdc.conf. > > I had a lot of problem with kprop and kpropd, but finally I get them > working on linux and solaris. > > If you create a new db on the slave be sure that the admin key in the > creation of the db is the same of the master one. > > Let me know. > > Bye. Well with "Be sure that the kdc.con" i mean check wether the kdc.conf is correct or not, that is if the pointer to the db, stash, acl are correct. Then, be sure that the kpropd.acl is configured, that is the server is allowed to the propagation of the db. Bye. Kerberos mailing list Kerberos@mit.edu https://mailman.mit.edu/mailman/listinfo/kerberos
Re: HELP!!! I am also having the kpropd problem
On 11 Mar, 08:46, [EMAIL PROTECTED] wrote: > Hi, > > Okay... I think I've found the issue. Apparently there is a problem when > running kpropd from inetd. A little googling turned up others that have > had thie same issue. This is probably a side effect of the fork/exec by > inetd. Does anyone know if there is already a bug open for this? > > Thanks, > -G > > Jason Edgecombe <[EMAIL PROTECTED]> > 03/10/2008 08:46 PM > > To > [EMAIL PROTECTED] > cc > [EMAIL PROTECTED] > Subject > Re: HELP!!! I am also having the kpropd problem > > > > > > [EMAIL PROTECTED] wrote: > > Hi, > > > I tried copying the krb5kdc directory to the slave. I get the same > result > > (Decrypt integrity check failed while getting initial ticket). Is there > > something else I could try? > > > Thanks, > > -G > > "Decrypt integrity check failed" usually means that the password is wrong. > > Jason The problem sounds that there is some problem with the key stash file that allows authenticating on the db for the propagation. Be sure that the kdc.conf, and then be sure that the kdc is correctly reading the proper kdc.conf. I had a lot of problem with kprop and kpropd, but finally I get them working on linux and solaris. If you create a new db on the slave be sure that the admin key in the creation of the db is the same of the master one. Let me know. Bye. Kerberos mailing list Kerberos@mit.edu https://mailman.mit.edu/mailman/listinfo/kerberos
Re: HELP!!! I am also having the kpropd problem
Hi, Okay... I think I've found the issue. Apparently there is a problem when running kpropd from inetd. A little googling turned up others that have had thie same issue. This is probably a side effect of the fork/exec by inetd. Does anyone know if there is already a bug open for this? Thanks, -G Jason Edgecombe <[EMAIL PROTECTED]> 03/10/2008 08:46 PM To [EMAIL PROTECTED] cc kerberos@mit.edu Subject Re: HELP!!! I am also having the kpropd problem [EMAIL PROTECTED] wrote: > Hi, > > I tried copying the krb5kdc directory to the slave. I get the same result > (Decrypt integrity check failed while getting initial ticket). Is there > something else I could try? > > Thanks, > -G > > > > > > "Decrypt integrity check failed" usually means that the password is wrong. Jason Kerberos mailing list Kerberos@mit.edu https://mailman.mit.edu/mailman/listinfo/kerberos
Re: HELP!!! I am also having the kpropd problem
Hi, I tried copying the krb5kdc directory to the slave. I get the same result (Decrypt integrity check failed while getting initial ticket). Is there something else I could try? Thanks, -G Jason Edgecombe <[EMAIL PROTECTED]> 03/10/2008 05:14 PM To [EMAIL PROTECTED] cc kerberos@mit.edu Subject Re: HELP!!! I am also having the kpropd problem [EMAIL PROTECTED] wrote: > Hello All, > > I am having the problem with database propagation that so many before me > have apparently had. I have read and tried so many suggestions in various > posts that I've lost count. I can't seem to find anyone who actually > reported that they had solved the problem. Is this function broken? Is > there some secret solution to the problem? I like many others also wrote a > script so that I could respin the config more easily. I could sure use > some help on this. I guess the next step is to dive into the code ;( > Would you please be more specific? Without more info, I can only suggest manually copying the krb5kdc folder from the master to the slave before running kprop. Jason Kerberos mailing list Kerberos@mit.edu https://mailman.mit.edu/mailman/listinfo/kerberos
Re: HELP!!! I am also having the kpropd problem
[EMAIL PROTECTED] wrote: > Hi, > > I tried copying the krb5kdc directory to the slave. I get the same result > (Decrypt integrity check failed while getting initial ticket). Is there > something else I could try? > > Thanks, > -G > > > > > > "Decrypt integrity check failed" usually means that the password is wrong. Jason Kerberos mailing list Kerberos@mit.edu https://mailman.mit.edu/mailman/listinfo/kerberos
Re: HELP!!! I am also having the kpropd problem
[EMAIL PROTECTED] wrote: > Hello All, > > I am having the problem with database propagation that so many before me > have apparently had. I have read and tried so many suggestions in various > posts that I've lost count. I can't seem to find anyone who actually > reported that they had solved the problem. Is this function broken? Is > there some secret solution to the problem? I like many others also wrote a > script so that I could respin the config more easily. I could sure use > some help on this. I guess the next step is to dive into the code ;( > Would you please be more specific? Without more info, I can only suggest manually copying the krb5kdc folder from the master to the slave before running kprop. Jason Kerberos mailing list Kerberos@mit.edu https://mailman.mit.edu/mailman/listinfo/kerberos
HELP!!! I am also having the kpropd problem
Hello All, I am having the problem with database propagation that so many before me have apparently had. I have read and tried so many suggestions in various posts that I've lost count. I can't seem to find anyone who actually reported that they had solved the problem. Is this function broken? Is there some secret solution to the problem? I like many others also wrote a script so that I could respin the config more easily. I could sure use some help on this. I guess the next step is to dive into the code ;( Thanks, -G Kerberos mailing list Kerberos@mit.edu https://mailman.mit.edu/mailman/listinfo/kerberos
