[32868] in Kerberos
RE: Help
daemon@ATHENA.MIT.EDU (Paulo Oliveira)
Tue Nov 9 13:29:13 2010
Message-ID: <SNT138-w148CC5D2F9E2CEB21E575BFC300@phx.gbl>
From: Paulo Oliveira <bad_boy_sk8@hotmail.com>
To: <kerberos@mit.edu>
Date: Tue, 9 Nov 2010 16:29:05 -0200
In-Reply-To: <SNT138-w27AD4F178ACE1950B62168FC300@phx.gbl>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
Hello !!
My krb5kdc and kadmind are running,
I type the follow:
kdb5_util create -s...I believe that is to create the stash file, am I correct?
Now I am with problem in authentication. I type kinit paulo@teste.uem and appear:
Nov 09 16:16:26 paulo-laptop krb5kdc[3372](info): AS_REQ (7 etypes {18 17 16 23 1 3 2}) 127.0.0.1: CLIENT_NOT_FOUND: paulo@teste.uem for krbtgt/teste.uem@teste.uem, Client not found in Kerberos database
In my kadm5.acl file has the user such as below:
*/paulo@teste.uem
Can someone help me??
Thanks.
From: bad_boy_sk8@hotmail.com
To: b.candler@pobox.com
CC: kerberos@mit.edu
Subject: RE: Help
Date: Tue, 9 Nov 2010 15:20:37 -0200
Hello !!
I configured my host, and I don't have more problem with the dns kerberos.teste.uem.
When I type ping kerberos.teste.uem, it answers to me:
PING kerberos.teste.uem (127.0.0.1) 56(84) bytes of data.
64 bytes from kerberos.teste.uem (127.0.0.1): icmp_seq=1 ttl=64 time=0.031 ms
64 bytes from kerberos.teste.uem (127.0.0.1): icmp_seq=2 ttl=64 time=0.037 ms
Now I am with problems to configure the Kerberos again.
When I type /usr/sbin/kadmind appear:
kadmind: No such file or directory while initializing, aborting
When I type /usr/sbin/krb5kdc appear:
krb5kdc: cannot initialize realm teste.uem - see log file for details
When I type kinit appear:
kinit: Cannot contact any KDC for realm 'teste.uem' while getting initial credentials
I need your help...
Follows bellow my krb5.conf file:
[libdefaults]
default_realm = teste.uem
dns_lookup_realm = false
dns_lookup_kdc = false
[realms]
teste.uem = {
kdc = kerberos.teste.uem:88
admin_server = kerberos.teste.uem:749
default_domain = teste.uem
}
[domain_realm]
.teste.uem = teste.uem
teste.uem = teste.uem
[login]
krb4_convert = false
krb4_get_tickets = false
[logging]
kdc = FILE:/var/log/krb5kdc.log
admin_server = FILE:/var/log/kadmin.log
default = FILE:/var/log/krb5lib.log
Thanks.
-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
> Date: Fri, 29 Oct 2010 23:48:06 +0300
> From: B.Candler@pobox.com
> To: bad_boy_sk8@hotmail.com
> CC: kerberos@mit.edu
> Subject: Re: Help
>
> On Thu, Oct 28, 2010 at 02:35:43PM -0200, Paulo Oliveira wrote:
> > > When you type kinit do you still see the following error?
> > >
> > > > kinit: Cannot resolve network address for KDC in realm teste.uem while getting initial credentials
> >
> > Yes, It's appearing the same error.
> >
> > > If so, does kerberos.teste.uem exist in the DNS or in /etc/hosts ?
> > > What happens if you type "ping kerberos.teste.uem" ?
> >
> > I typed ping kerberos.teste.uem...and appeared the following message:
> >
> > ping: unknown host kerberos.teste.uem
>
> This means that your server can't find any machine called
> "kerberos.teste.uem" - that is, it cannot convert that name into an IP
> address.
>
> > I am new in Kerberos! Sorry if my asks are a little basics.
>
> I'm afraid your problem is not with Kerberos; you need to learn some basics
> of TCP/IP and DNS first. Use google to find some tutorials, and if you have
> questions, another mailing list may be a more appropriate place to ask.
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
