Re: kadmin.local works but kadmin doesn't. kpasswd 'insufficient access to lock data base'

2006-06-13 Thread Ken Raeburn
On Jun 12, 2006, at 16:03, [EMAIL PROTECTED] wrote: The whole problem is solved. Man page for 'kerberos_selinux' essentailly says that selinux protection for krb5kdc and kadmind needs to be turned off using the following commands: How odd. I don't know anything about selinux, but I find it

Re: kadmin.local works but kadmin doesn't. kpasswd 'insufficient access to lock data base'

2006-06-13 Thread Jeffrey Hutzelman
On Tuesday, June 13, 2006 03:00:20 AM -0400 Ken Raeburn [EMAIL PROTECTED] wrote: On Jun 12, 2006, at 16:03, [EMAIL PROTECTED] wrote: The whole problem is solved. Man page for 'kerberos_selinux' essentailly says that selinux protection for krb5kdc and kadmind needs to be turned off using

Re: kadmin.local works but kadmin doesn't. kpasswd 'insufficient access to lock data base'

2006-06-13 Thread Jan Iven
On Tue, 2006-06-13 at 11:17 -0400, Jeffrey Hutzelman wrote: .. I'd suggest looking at the kadmind log and/or attaching strace to the running strace to see what file it's trying to access that is prohibited by policy. Then adjust the policy to correct the problem. (btw, adjusting the policy

Re: kadmin.local works but kadmin doesn't. kpasswd 'insufficient access to lock data base'

2006-06-13 Thread Jeffrey Hutzelman
On Tuesday, June 13, 2006 06:40:56 PM +0200 Jan Iven [EMAIL PROTECTED] wrote: On Tue, 2006-06-13 at 11:17 -0400, Jeffrey Hutzelman wrote: .. I'd suggest looking at the kadmind log and/or attaching strace to the running strace to see what file it's trying to access that is prohibited by

Re: kadmin.local works but kadmin doesn't. kpasswd 'insufficient access to lock data base'

2006-06-13 Thread Will Fiveash
On Tue, Jun 13, 2006 at 11:17:35AM -0400, Jeffrey Hutzelman wrote: I'd suggest looking at the kadmind log and/or attaching strace to the running strace to see what file it's trying to access that is prohibited by policy. Then adjust the policy to correct the problem. As an aside, Solaris

Re: kadmin.local works but kadmin doesn't. kpasswd 'insufficient access to lock data base'

2006-06-12 Thread Sensei
On 2006-06-11 21:27:51 +0200, [EMAIL PROTECTED] said: krb5.conf --- [logging] default = FILE:/var/log/krb5libs.log kdc = FILE:/var/log/krb5kdc.log admin_server = FILE:/var/log/kadmind.log [libdefaults] default_realm = MY.REALM.COM

Re: kadmin.local works but kadmin doesn't. kpasswd 'insufficient access to lock data base'

2006-06-12 Thread bohongdxl
Sensei wrote: On 2006-06-11 21:27:51 +0200, [EMAIL PROTECTED] said: krb5.conf --- [logging] default = FILE:/var/log/krb5libs.log kdc = FILE:/var/log/krb5kdc.log admin_server = FILE:/var/log/kadmind.log [libdefaults] default_realm =

Re: kadmin.local works but kadmin doesn't. kpasswd 'insufficient access to lock data base'

2006-06-12 Thread bohongdxl
[EMAIL PROTECTED] wrote: Sensei wrote: On 2006-06-11 21:27:51 +0200, [EMAIL PROTECTED] said: krb5.conf --- [logging] default = FILE:/var/log/krb5libs.log kdc = FILE:/var/log/krb5kdc.log admin_server = FILE:/var/log/kadmind.log

Re: kadmin.local works but kadmin doesn't. kpasswd 'insufficient access to lock data base'

2006-06-11 Thread Sensei
On 2006-06-11 04:27:25 +0200, [EMAIL PROTECTED] said: Hello, I tried to install Kerberos on my small systems and have got limited success. krb5kdc and kadmind are installed on an Intel Xeon box running 65-bit Ferora core 5. Firewall is enabled on this machine, with port 88 and

Re: kadmin.local works but kadmin doesn't. kpasswd 'insufficient access to lock data base'

2006-06-11 Thread Ken Raeburn
On Jun 10, 2006, at 22:27, [EMAIL PROTECTED] wrote: kadmin: cpw myusr Enter password for principal myusr: Re-enter password for principal myusr: change_password: Unknown code kdb5 21 while changing password for [EMAIL PROTECTED]. Additionally, I have having problem with kpasswd. When I

Re: kadmin.local works but kadmin doesn't. kpasswd 'insufficient access to lock data base'

2006-06-11 Thread bohongdxl
Thanks, The configuration files are as follows: (I have replaced my real realm with 'MY.REALM.COM', and my real domain with 'realm.com'). thanks. krb5.conf --- [logging] default = FILE:/var/log/krb5libs.log kdc = FILE:/var/log/krb5kdc.log admin_server

Re: kadmin.local works but kadmin doesn't. kpasswd 'insufficient access to lock data base'

2006-06-11 Thread bohongdxl
Ken Raeburn wrote: On Jun 10, 2006, at 22:27, [EMAIL PROTECTED] wrote: kadmin: cpw myusr Enter password for principal myusr: Re-enter password for principal myusr: change_password: Unknown code kdb5 21 while changing password for [EMAIL PROTECTED]. Additionally, I have having

kadmin.local works but kadmin doesn't. kpasswd 'insufficient access to lock data base'

2006-06-10 Thread bohongdxl
Hello, I tried to install Kerberos on my small systems and have got limited success. krb5kdc and kadmind are installed on an Intel Xeon box running 65-bit Ferora core 5. Firewall is enabled on this machine, with port 88 and 749 accepting incoming packets. DNS is also working properly.