[19189] in Kerberos

home help back first fref pref prev next nref lref last post

Re: kdc.conf Error missing parameters

daemon@ATHENA.MIT.EDU (Nathan Ward)
Sun May 4 01:22:01 2003

To: Sloan <smileyq@nashlinux.com>, kerberos@mit.edu
Message-ID: <opromug4raeraz96@mail.esphion.com>
Content-Type: text/plain; charset=iso-8859-15; format=flowed
From: Nathan Ward <nward@esphion.com>
MIME-Version: 1.0
Date: Sun, 04 May 2003 17:20:54 +1200
In-Reply-To: <smileyq-29414F.23595403052003@news.comcast.giganews.com>
Errors-To: kerberos-bounces@mit.edu

> supported_enctypes = desc3-hmac-sha1:normal des-cbc-crc:normal

desc3 should be des3 here I think.

On Sat, 03 May 2003 23:59:54 -0500, Sloan <smileyq@nashlinux.com> wrote:

> I am trying to setup kerberos login for Mac OS X 10.2.4 client using a 
> kerberos server as a Solaris 8. When I try to start krb5kdc I get the 
> following error message when I have the kdc file located in 
> /usr/local/var/krb5kdc/kdc.conf.
>
> Error:
>
> krb5kdc: Stored master key is corrupted - while fetching master key K/M 
> for real
> m PAUL.NASHLINUX.COM
>
>
> When I remove the kdc.conf file it starts up just file and authenticates 
> everything fine. My problem is I can't run or star kadmind or run kadmin 
> to add host principles to keytabs etc.. Any ideas what could be causing 
> this?
>
> Below is my kdc.conf file:
>
> [kdcdefaults]
> kdc_ports = 88, 750
>
> [realms]
> PAUL.NASHLINUX.COM = {
> database_name = /usr/local/var/krb5kdc/principal
> admin_keytab = /usr/local/var/krb5kdc/kadm5.keytab
> acl_file = /usr/local/var/krb5kdc/kadm5.acl
> key_stack_file= /usr/local/var/krb5kdc/.k5.PAUL.NASHLINUX.COM
> kadmind_port = 749
> max_life = 10h 0m 0s
> max_renewable_life = 7d 0h 0m 0s
> master_key_type = des3-hmac-sha1
> supported_enctypes = desc3-hmac-sha1:normal des-cbc-crc:normal
>
> }
> ________________________________________________
> Kerberos mailing list           Kerberos@mit.edu
> https://mailman.mit.edu/mailman/listinfo/kerberos
>
>



-- 
Nathan Ward
Esphion Ltd.

________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

home help back first fref pref prev next nref lref last post