Re: Wrong principal in request

2009-12-30 Thread Russ Allbery
Jeff Blaine writes: > Server: CentOS 5.3, MIT Kerberos 1.6.x, Russ Alberry's pam_krb5 > Failure: Aside from GSSAPI not being used... > sshd[12234]: pam_krb5RA(sshd:auth): pam_sm_authenticate: entry (0x1) > sshd[12234]: pam_krb5RA(sshd:auth): (user jblaine) attempting > authentication as jbla..

Wrong principal in request

2009-12-30 Thread Jeff Blaine
Just me again, stumped... Client: PuTTY-GSSAPI from Matt Loar configured to perform GSSAPI authentication only, KfW 3.2, credentials for jbla...@foo Server: CentOS 5.3, MIT Kerberos 1.6.x, Russ Alberry's pam_krb5 Failure: Aside from GSSAPI not being used... sshd[12234]: pam_krb5RA(sshd

Re: unable to get default realm for solaris 10

2009-12-30 Thread Andrea Cirulli
Hi, in what path is your krb5.conf, to be sure that all solaris and mit tools are reading the same configuration file do this: ln -s /etc/krb5.conf /etc/krb5/krb5.conf If even this link does not fix your problem, do this: truss /usr/local/sbin/kadmin.local > /tmp/kadmin.local.log 2>&1 and the

unable to get default realm for solaris 10

2009-12-30 Thread Mohammad, Meraj
i'm trying to setup Kerberos(krb5-1.7)with Solaris 10. While installation I am getting following error. While running kadmin.local /usr/local/sbin/kadmin.local kadmin.local: unable to get default realm Following is the my configuration file Krb5.cof [libdefaults] default_realm = E

Copying/Moving Principals from One Realm to Another

2009-12-30 Thread Holger Rauch
Hi, I'm using MIT Kerberos on a Debian Lenny system. All Kerberos related info is stored in an LDAP DIT (realm was initialized by using kdb5_ldap_util). Now I've created a second realm whose contents reside in the same DIT since our machines will be moving to a new subnet and a different DNS doma