[29563] in Kerberos
Re: CentOS attempting to set up Kerberos 5-tickets created &
daemon@ATHENA.MIT.EDU (Damo Gets)
Mon Mar 24 10:02:56 2008
From: Damo Gets <dgetsman@amirehab.net>
Date: Mon, 24 Mar 2008 06:55:42 -0700 (PDT)
Message-ID: <05d523ff-4eb8-4156-adab-6454274a83c9@m36g2000hse.googlegroups.com>
Mime-Version: 1.0
X-Complaints-To: groups-abuse@google.com
Complaints-To: groups-abuse@google.com
To: kerberos@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
I have now verified that I have connections working between the two
test machines. Unfortunately it appears that I can only connect from
my server/kdc to the client machine utilizing kerberized services. I
am able to create and destroy tickets on each machine without any
problems. Currently I'm testing with the kerberized rsh & rlogin
clients found in the klogin, eklogin, and kshell packages for the
distributions.
I have now cached tickets on both machines for my primary and
secondary logins (just in case I'm not understanding something
correctly). ie on each machine I have cached tickets for
myuser@MYDOMAIN.COM and myuser/admin@MYDOMAIN.COM. Each machine has
the following in the /etc/krb5.keytab files:
SERVER:
KVNO Principal
-----------------------------------------
3 host/myclient.mydomain.com@MYDOMAIN.COM
3 host/myclient.mydomain.com@MYDOMAIN.COM
3 host/myclient.mydomain.com@MYDOMAIN.COM
3 host/myclient.mydomain.com@MYDOMAIN.COM
CLIENT:
KVNO Principal
-----------------------------------------
8 host/myclient.mydomain.com@MYDOMAIN.COM
8 host/myclient.mydomain.com@MYDOMAIN.COM
8 host/myclient.mydomain.com@MYDOMAIN.COM
8 host/myclient.mydomain.com@MYDOMAIN.COM
4 host/myserver@mydomain.com@MYDOMAIN.COM
4 host/myserver@mydomain.com@MYDOMAIN.COM
4 host/myserver@mydomain.com@MYDOMAIN.COM
4 host/myserver@mydomain.com@MYDOMAIN.COM
When attempting a connection from the client to the server I receive
the following error:
foo@myclient:~$ rlogin -l myclient myserver
Couldn't authenticate to server: Server rejected authentication
(during sendauth exchange)
Server returned error code 60 (Generic error (see e-text))
Error text sent from server: Key table entry not found
Trying krb4 rlogin...
krb_sendauth failed: You have no tickets cached
trying normal rlogin (/usr/bin/netkit-rlogin)
exec: No such file or directory
foo@myclient:~$
Any assistance would be greatly appreciated. I'm pretty sure that
after this point I will be able to get on with kerberizing some other
machines on the network; it'll be nice to be able to test this on more
than just the two machines.
-Damon Getsman
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
