[22091] in Kerberos
Problems with windows 2003 KDC and MIT kerberos
daemon@ATHENA.MIT.EDU (kdkirmse)
Thu Jul 29 15:20:42 2004
From: kdkirmse@psiweaver.com (kdkirmse)
Date: 29 Jul 2004 10:14:12 -0700
Message-ID: <d0384ccd.0407290914.74967520@posting.google.com>
To: kerberos@mit.edu
Errors-To: kerberos-bounces@mit.edu
I have been having problems with getting a keytab file on a windows
2000 client running the MIT Kerberos utilities to interface properly
with a windows 2003 KDC. I had the same client working correctly when
the KDC was a windows 2000 server.
The command "kinit rdop@INFRASTOR.US" works correctly but when I
attempt to use "kinit -k" I get the following error message
kinit(v5): Cannot find KDC for requested realm while getting initial
credentials
My krb5.ini file is as follows
[libdefaults]
ticket_lifetime = 600
default_realm = INFRASTOR.US
default_keytab_name = C:/WINNT/krb5.keytab
default_etypes = des-cbc-crc
default_etypes_des = des-cbc-crc
[realms]
INFRASTOR.US = {
kdc = 192.168.0.3
admin_server = 192.168.0.3
}
[domain_realm]
.infrastor.us = INFRASTOR.US
infrastor.us = INFRASTOR.US
"klist -k -t -K" gives the following results.
Keytab name: FILE:C:/WINNT/krb5.keytab
KVNO Timestamp Principal
---- ----------------- ----------------------------------------
3 07/28/04 17:52:06 rdop@INFRASTOR.US (0x158cefb5d56d5eab)
This problem is frustrating because I had the system working correctly
prior to upgrading the KDC to a windows 2003 machine. I need some
suggestions on where to look next.
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos