When trying to run kadmin from a host, I receive the following error
message: " Required parameters in kdc.conf missing while initializing kadmin
interface". I have checked my kdc.conf file and things look good.
Any thoughts...
hi everyone,
i am trying to configure kerberos 5 on a solaris 9 machine
i am getting this error:
kadmin: Client/server realm mismatch in initial ticket request while
initializing kadmin interface
can anyone help me fix this problem, the server and client have their
corresponding hostnames in the
Hi all,
I am getting the following error
bash-2.05# kadmin -p scotty
Enter Password:
kadmin: GSS-API (or Kerberos) error while initializing kadmin interface
in the /var/krb5/kdc.log file i get the following
Feb 10 13:12:18 scotty krb5kdc[17623](info): AS_REQ 192.168.1.12(88): ISSUE:
authtime
I have an interesting problem. I cannot access the kadmin server on my
master kdc from most of the kadmin clients on my network. My KDC is
Redhat 7 but I cannot tell what version of Kerberos it's using; (problem
2. :-) The other interesting thing about the problem is that this all
worked las
Check if you have an admin entry in /etc/krb5.conf, like:
[realms]
YOUR.REALM = {
kdc = your.kdc.server
admin_server = your.kdc.server
default_domain = your.domain
}
Em Thu, Jan 24, 2002 at 12:24:23PM -0500, Test News escreveu:
> Wh
On Thu, Jan 24, 2002 at 12:24:23PM -0500, Test News wrote:
> When trying to run kadmin from a host, I receive the following error
> message: " Required parameters in kdc.conf missing while initializing kadmin
> interface". I have checked my kdc.conf file and things look good.
> Any thoughts...
Em Thu, Jan 24, 2002 at 12:09:38PM -0600, Steve Langasek escreveu:
> I've found that I have to do this locally even if I have all SRV records
> in place. Either there's something wrong with the SRV record I'm using,
> or the kadmin from MIT KRB5 1.2.3 doesn't check SRV records.
The documentati
Hi Scotty,
The problem sounds like the Kerberos realms are different on each
machine, rather than the hosts name.
What is the default realm for the kdc and the client machine? Also, if
you do a klist before running kadmin, what realm does it list?
Regards
Edward Murrell
[EMAIL PROTECTED]
scott
Hi Edward,
I am really thankful for your reply.
I am new in the field of KERBEROS and I don't know much about it, i went over
some white papers that i have found on the net with no luck i have always been
stuck everywhere.
I cleaned everything from the begining and i urgently need your help to m
hi Scotty,
First things first...
>>After i erased the principal.db and created it from the beginning and
followed some steps..
I hope ur "some steps" includes configuring the KDC and the client.
Here is the step by step procedure for ur ready reckoner:
1. Export binary path in PATH env. var. Do
Hi Soctty,
Unfortunately, I've been on Holiday for over the Christmas break, so I
didn't check my email.
It looks like the problem is that you're defining a realm for each
computer rather than for your network.
So, if your domain is called example.com, and your computers are called
gaza and hors
I tried the following:
bash-2.05# kadmin -p kadmin/scottie.beirut.navlink.com
Enter Password:
kadmin: Incorrect password while initializing kadmin interface
even the password that i used is surely correct!!!
Please point me out to these two errors.
Regards,
Scotty
scotty adams <[EMAIL PROTECTE
>bash-2.05# kadmin -p kadmin/scottie.beirut.navlink.com
>Enter Password:
>kadmin: Incorrect password while initializing kadmin interface
Well, you definately don't want to use -p kadmin/scottie.beruit.navlink.com,
that's a password you don't know.
># kadmin -p scotty
>Enter Password:
>kadmin: GSS
hey, what about the time delta?
Please check the time delta between ur client & server should not be more
than 5 mins.If it is so, then change the time on client & re-try.
(If the server and client are both on same m/c then in that case, plz ignore
this mail.)
Regards,
Rathor
>Then what is the problem???
>How can it be solved? i am really stuck
Sigh. If nothing useful appears in kadmind or kdc logs ... well, the only
way I know of to debug this problem is to run kadmin under the debugger
and trace down the problem. One thing comes to mind: it looks like you
have NAT
Hi,
Here is the log line found under kdc.log
Feb 11 15:50:50 scotty krb5kdc[17623](info): AS_REQ 192.168.1.12(88): ISSUE:
authtime 1171216250, scotty/[EMAIL PROTECTED] for kadmin/[EMAIL PROTECTED]
Times on both servers are identical
Pls advise
Thanks,
scotty
Ken Hornstein <[EMAIL PROTECTED
Scotty,
From your entry in the kdc.log it looks to me like you do have a valid
admin principal and your password is correct, so I am guessing your
permissions for that principal are wrong.
Look in your /krb5/var/krb5kdc/kadm5.acl file on the kerberos master, to
see if the principal you are u
various wrote:
...
> Ken Hornstein <[EMAIL PROTECTED]> wrote: >Then what is the problem???
> >How can it be solved? i am really stuck
>
> Sigh. If nothing useful appears in kadmind or kdc logs ... well, the only
> way I know of to debug this problem is to run kadmin under the debugger
> and trac
Hi,
This is what i am getting after all
bash-2.05# kadmin scotty
Enter Password:
Enter Password:
kadmin: Preauthentication failed while initializing kadmin interface
kdc.log shows:
Feb 12 12:54:10 scotty krb5kdc[14905](info): AS_REQ 192.168.1.12(88):
PREAUTH_FAILED: scotty/[EMAIL PROTECTED] fo
scotty adams <[EMAIL PROTECTED]> wrote:
> This is what i am getting after all
>
> bash-2.05# kadmin scotty
> Enter Password:
> Enter Password:
> kadmin: Preauthentication failed while initializing kadmin interface
Preauth failed is usally a "wrong password" message.
Can you kinit scotty ?
scotty adams <[EMAIL PROTECTED]> writes:
> Hi,
>
> This is what i am getting after all
>
> bash-2.05# kadmin scotty
> Enter Password:
> Enter Password:
> kadmin: Preauthentication failed while initializing kadmin interface
>
> kdc.log shows:
>
> Feb 12 12:54:10 scotty krb5kdc[14905](info): AS_R
Hi Marcus,
it seems that i can't even kinit over scotty
bash-2.05# kinit scotty
Password for [EMAIL PROTECTED]:
kinit: Preauthentication failed while getting initial credentials
same error as that of kadmin
How can i turn off REQUIRES_PRE_AUTH on the principal?
Thanks,
Scotty
Marcus Watts <
scotty adams <[EMAIL PROTECTED]> writes:
> Hi Marcus,
>
> it seems that i can't even kinit over scotty
>
> bash-2.05# kinit scotty
> Password for [EMAIL PROTECTED]:
> kinit: Preauthentication failed while getting initial credentials
>
> same error as that of kadmin
>
> How can i turn off REQUI
hi,
after i modified the principal using modprinc -requires_preauth
kinit scotty
kinit: Password incorrect
Why!!!
Marcus Watts <[EMAIL PROTECTED]> wrote: scotty adams writes:
> Hi Marcus,
>
> it seems that i can't even kinit over scotty
>
> bash-2.05# kinit scotty
> Password for [EMAIL PR
scotty adams <[EMAIL PROTECTED]> writes:
> hi,
>
> after i modified the principal using modprinc -requires_preauth
>
> kinit scotty
> kinit: Password incorrect
>
> Why!!!
I don't know. Could be lots and lots of things. For instance:
/1/ password *is* incorrect.
/2/ operator e
Hi Marcus,
When i use
Then try to kinit
it prompts incorrect password
then i should change the password so that it works, but i guess upon changing
the password
the princ is being modified again... thus i guess that the
-requires_preauth isnt set anymore...
Can you please advise me how to m
> Hi Marcus,
>
> When i use
>
>
>
> Then try to kinit
> it prompts incorrect password
> then i should change the password so that it works, but i guess upon changing
> the password
> the princ is being modified again... thus i guess that the
> -requires_preauth isnt set anymore...
> Can you
Hi marcus,
My getprinc for HTTP/[EMAIL PROTECTED]
kadmin.local: getprinc HTTP/[EMAIL PROTECTED]
Principal: HTTP/[EMAIL PROTECTED]
Expiration date: [never]
Last password change: Sun Feb 18 10:00:03 GMT 2007
Password expiration date: [none]
Maximum ticket life: 24855 days 03:14:07
Maximum renewa
> Hi marcus,
>
> My getprinc for HTTP/[EMAIL PROTECTED]
>
> kadmin.local: getprinc HTTP/[EMAIL PROTECTED]
> Principal: HTTP/[EMAIL PROTECTED]
> Expiration date: [never]
> Last password change: Sun Feb 18 10:00:03 GMT 2007
> Password expiration date: [none]
> Maximum ticket life: 24855 days 03:
Scotty & Dan wrote:
...
> > Hi marcus,
> >
> > My getprinc for HTTP/[EMAIL PROTECTED]
> >
> > kadmin.local: getprinc HTTP/[EMAIL PROTECTED]
> > Principal: HTTP/[EMAIL PROTECTED]
> > Expiration date: [never]
> > Last password change: Sun Feb 18 10:00:03 GMT 2007
> > Password expiration date: [n
30 matches
Mail list logo