[37519] in Kerberos
Re: ubuntu16.04 and /etc/krb5.conf
daemon@ATHENA.MIT.EDU (Greg Hudson)
Wed Jun 15 12:33:40 2016
To: Giuseppe Mazza <g.mazza@imperial.ac.uk>,
"kerberos@MIT.EDU" <kerberos@mit.edu>
From: Greg Hudson <ghudson@mit.edu>
Message-ID: <57618348.7070305@mit.edu>
Date: Wed, 15 Jun 2016 12:33:12 -0400
MIME-Version: 1.0
In-Reply-To: <57617DD4.4050901@imperial.ac.uk>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
On 06/15/2016 12:09 PM, Giuseppe Mazza wrote:
> In ubuntu14.04 I do not have to declare explicitly in my /etc/krb5.conf
> the windows dc's, i.e. I do not need to write something like:
>
> IC.AC.UK = {
> default_domain = ic.ac.uk
> kdc = dc1.ic.ac.uk
> kdc = dc2.ic.ac.uk
> }
> And it works.
>
> In ubuntu 16.04 I have noticed I need it. If I do not declare it
> explicitly, I will not be able to login (for example or graphically or
> via ssh).
Nothing should have changed to make this necessary. If you'd like to
help figure out what's going on, comparing the output of
"KRB5_TRACE=/dev/stdout kinit user@IC.AC.UK" on both versions might be
helpful. Also, finding out the installed krb5 version for each Ubuntu
version ("dpkg -l krb5-user") would be useful.
Also, default_domain is a krb4 relic. You should never need to set it
any more.
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
