Re: Auth: rlm_krb5: [test1@CSP-BACK] krb5_rd_req() failed: Permission denied in replay cache code

2011-06-15 Thread Phil Mayers
return the error: Auth: rlm_krb5: [test1@CSP-BACK] krb5_rd_req() failed: Permission denied in replay cache code So, in debug mode it's fine, but in daemon mode it's giving permission denied errors as above? That error sounds like it's coming out of the kerberos libraries, rather than FreeRADIUS

Re: Auth: rlm_krb5: [test1@CSP-BACK] krb5_rd_req() failed: Permission denied in replay cache code

2011-06-15 Thread g17jimmy
I haven't yet done a test using strace but wanted to add what I did find when I got started this morning. If I attempt to authenticate with the user test1, password `qwer` (the correct password,) I get this response: Wed Jun 15 08:40:19 2011 : Auth: rlm_krb5: [test1@CSP-BACK] krb5_rd_req() failed

Re: Auth: rlm_krb5: [test1@CSP-BACK] krb5_rd_req() failed: Permission denied in replay cache code

2011-06-15 Thread g17jimmy
problems getting Freeradiusto authenticate while started in daemon mode. When the process is started in debug mode it seems to funciton, but authentications while in daemon mode return the error: Auth: rlm_krb5: [test1@CSP-BACK] krb5_rd_req() failed: Permission denied in replay cache code So

Re: Auth: rlm_krb5: [test1@CSP-BACK] krb5_rd_req() failed: Permission denied in replay cache code

2011-06-15 Thread Phil Mayers
On 15/06/11 15:49, g17jimmy wrote: d'oh! it was SElinux. I had disabled it temporarily, but didn't set it as disabled in /etc/selinux/config so it was blocking the authentication. Well, IMHO disabling it altogether is not a good idea. You might want to consider just disabling it for

Re: Auth: rlm_krb5: [test1@CSP-BACK] krb5_rd_req() failed: Permission denied in replay cache code

2011-06-15 Thread John Dennis
On 06/15/2011 10:56 AM, Phil Mayers wrote: On 15/06/11 15:49, g17jimmy wrote: d'oh! it was SElinux. I had disabled it temporarily, but didn't set it as disabled in /etc/selinux/config so it was blocking the authentication. Well, IMHO disabling it altogether is not a good idea. You might want

Auth: rlm_krb5: [test1@CSP-BACK] krb5_rd_req() failed: Permission denied in replay cache code

2011-06-14 Thread Jimmy
, but authentications while in daemon mode return the error: Auth: rlm_krb5: [test1@CSP-BACK] krb5_rd_req() failed: Permission denied in replay cache code Since authentication works in debug mode I'm not sure what I can give to support the error besides the krb5kdc/slapd/radius log outputs and the client