[29460] in Kerberos
error : kinit(v5) : KRB5 error code 52 while getting initial
daemon@ATHENA.MIT.EDU (Sunil Chandrasekharan)
Wed Mar 12 03:00:17 2008
From: Sunil Chandrasekharan <sunilsushil@gmail.com>
Date: Tue, 11 Mar 2008 23:01:56 -0700 (PDT)
Message-ID: <a3496cdb-dffa-4cdd-8e3a-05f777565539@h11g2000prf.googlegroups.com>
Mime-Version: 1.0
X-Complaints-To: groups-abuse@google.com
Complaints-To: groups-abuse@google.com
To: kerberos@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
Hello all,
i am Sunil C. i have a domain named xx.com which has a KDC.
i also have a domain co.yy where my server is. there is no KDC in it.
users are in xx.com domain. but my servers are in (co.yy) domain.
i had set up a test scenario with a user and a server in domain
(xx.com).
since KDc was setup i got ticket and was able to authenticate well
using kerberos.
my issue is that all my production servers are in domain (co.yy) which
doesnt have a KDC.
i want to authenticate and use the server services in that domain.
setting up KDC is not feasible in both domains for me.
now i have done some configuration in krb5.conf file on my server
(test.co.yy)
[domain_realm]
xx.com = XX.COM
.xx.com = XX.COM
co.yy = XX.COM
.co.yy = XX.COM
this shows that my domain co.yy which doesnnot have a KDC , i have
mapped it to the realm XX.COM .
now i have some issues.
1) i tried to get a keytab from the KDC of XX.COM ( my server in
co.yy)
> ktpass -princ HTTP/test.co.yy@XX.COM
2) i somehow managed to get a keytab . i copied into Apache folder and
executed the command.
kinit -t /usr/local/apache/test03keytab HTTP/test.co.yy@XX.COM
password: xxxx
error : kinit(v5) : KRB5 error code 52 while getting initial
credentials
Please help me understand what is this error..
is it some issue with domain mapping configuration in krb5.conf file?
i am using kerberos 1.2.7 version.
Thanks in advance
Sunil C
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
