[29494] in Kerberos
troubleshooting failed kinit
daemon@ATHENA.MIT.EDU (David Bear)
Fri Mar 14 18:26:32 2008
From: David Bear <david.bear@asu.edu>
To: kerberos@mit.edu
Date: Fri, 14 Mar 2008 15:28:14 -0700
MIME-Version: 1.0
Content-Disposition: inline
Message-Id: <200803141528.14487.david.bear@asu.edu>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
I use a laptop for all my work and move around a couple of networks. For the
past couple months, I have had no problem authenticating to kerberos from the
networks I use. However, last week when attempting to kinit from my home,
kinit fails with the message:
kinit(v5): Cannot contact any KDC for requested realm while getting initial
credentials
I know my kdc's are alive and active. There are 5. All their names resolve
properly. Since ASU blocks pings I can really ping them from my home. I
thought I could just send some bits to them so I tried a
echo "stuff" | netcat krb1.asu.edu 88
stuff left, and never came back.
when attepting the netcat using udp, netcat never woke up, i.e it appear that
netcat never got a response.
I assume this means the somewhere between home and krb1 that udp/88 is being
blocked or tarpitted?
However, this is probably the wrong approach. Can anyone recommend a way to
troubleshoot kinit failures?
other details: 1) I can successfully kinit from any asu network, duh.
2) my laptop gets its address via dhcp from all networks
3) my hope network is nat'ed and I have a dsl connection.
4) since I was in the past able to kinit from home, I assume something
somewhere changed. I did change two things which I dont' think would affect
this. First, I had my dsl speed increase from 256/256, to 1536/768. Second, I
bought a new actiontek modem, but configured it the same way a the old
actiontek modem.
Any pointers?
--
David Bear
College of Public Programs/ASU
411 N Central, Phoenix, AZ 85004
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
