[22671] in Kerberos
Re: Key version number for principal in key table is incorrect
daemon@ATHENA.MIT.EDU (Calin Barbat)
Tue Oct 12 05:30:34 2004
Message-ID: <416BA38C.4070603@osram.de>
Date: Tue, 12 Oct 2004 11:27:40 +0200
From: Calin Barbat <c.barbat@osram.de>
MIME-Version: 1.0
To: kerberos@mit.edu, "Matthew Royal" <matthew.royal@duke.edu>,
Martin Rex <martin.rex@sap.com>
In-Reply-To: <7A05A249A3DE11459B154221006BDE6F03384CF7@exc-mch01.mch.osram.de>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
Hello again,
I found out (Matt suggested this a long time ago, now I gave it
attention) that issuing a:
kinit -k -t <local_keytab> <principal>
seems to get a fresh ticket from the KDC and is suitable to be run
from crontab, as it doesn't ask the user for a password.
Does this solve the first issue below, or do I still need to signal it
somehow to the SAP server that the ticket got renewed?
Calin.
Barbat, Calin wrote:
>Hi to the experts,
>
>I have a somewhat special setup here, some of you are in the know of it:
>
>I have three hosts running SAP servers under Linux, Win2k Server and SunOS respectively and am trying to make single sign-on working using MIT Kerberos.
>All three are connected to an Win2k DC.
>
>There are two issues left to do: ensure that the servers are up and running as long as possible - somehow it must be possible to renew the ticket indefinitely, does anyone know how to do this?
>
>The second one is that the SAP server writes the following GSSAPI message in it's log: "Key version number for principal in key table is incorrect".
>What could it be? The output of ktpass states that vno is 1 and ktutil on the Linux box says KVNO is 1 too.
>
>By the way: all three SAP servers use the same service principal in the AD, could this be an issue?
>
>Thanks in advance,
>
>Calin Barbat.
>
>________________________________________________
>Kerberos mailing list Kerberos@mit.edu
>https://mailman.mit.edu/mailman/listinfo/kerberos
>
>
>
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
