[1938] in Kerberos
Re: Testing the Sample Server--Its Not Working
daemon@ATHENA.MIT.EDU (Theodore Ts'o)
Wed May 27 13:22:04 1992
Date: Wed, 27 May 92 12:55:16 -0400
From: tytso@Athena.MIT.EDU (Theodore Ts'o)
To: nkhawand@unlinfo.unl.edu
Cc: kerberos@Athena.MIT.EDU
In-Reply-To: nancy khawand's message of 27 May 92 14:47:30 GMT,
Reply-To: tytso@Athena.MIT.EDU
Date: 27 May 92 14:47:30 GMT
From: nkhawand@unlinfo.unl.edu (nancy khawand)
I am trying to test the sample KERBEROS server. Unfortunately its not working:
root 13 -> kinit
MIT Project Athena (sparky)
Kerberos Initialization
Kerberos name: nkhawand
kinit: Retry count exceeded (send_to_kdc)
It sounds like you don't have the Kerberos KDC server running, or you
don't have your configuration files /etc/krb.conf set up correctly to
point to your Kerberos server.
Also keep in mind that the sample server (the sserver) is a sample
_application_ server. It is used to validate requests sent from the
sample _application_ client (sclient). In order to run the sample
client, you must first get initial ticket granting tickets, using kinit.
This requires that kinit be able to get the TGT's from the Kerberos KDC.
Once you have ticket granting tickets on your workstation, then you can
run the sample client. It will use your ticket granting tickets to
contact the Kerberos KDC, and get application tickets for the sampler
server. (Note: in order to do this, you must have first set up a
principal for the sample server, and extracted to the key for that
sample server and put it in /etc/srvtab on the sample server host). It
will then use those application tickets to contact sample server, which
will be able to verify your authentication.
The sample client and sample server are intended as a model so you can
see how to write programs that use Kerberos authentication. I suggest
that if you're still having problems after reading my above (very short
and not very detailed) explanation, that you go back and read some of
the Kerberos papers and the Kerberos documentation more carefully.
- Ted
