[22696] in Kerberos
RHEL 3.0 and Kerberos 1.3.4
daemon@ATHENA.MIT.EDU (Marcus O. White)
Tue Oct 19 22:51:27 2004
From: "Marcus O. White" <whitem@oem.doe.gov>
To: kerberos@mit.edu
Content-Type: text/plain
Message-Id: <1098240249.1486.27.camel@bn7812723>
Mime-Version: 1.0
Date: 19 Oct 2004 22:44:10 -0400
Content-Transfer-Encoding: 7bit
X-MailScanner-From: whitem@oem.doe.gov
Errors-To: kerberos-bounces@mit.edu
G'day All,
I've attempting to get kerberos installed and configured on a RHEL 3.0
server. Originally RHEL came with kerberos 1.2.7. I located and
installed from rpm the 1.3.4 version of kerberos. I had it working at
one point then decided to recreate the principal databases and keytab
files. Since recreating the databases kerberos has not worked. I
continually receive: "kinit(v5): Password incorrect while getting
initial". I've checked and rechecked the password numerous times.
I used the following script to create the kerberos database:
------------------------- cut here -----------------------
#!/bin/sh
# Script to initialize Kerberos Database
#
KRBDOMAIN=<Kerberos Domain>
KRBFQDN=<domain name>
KRBDIR=/var/kerberos/krb5kdc
echo "Initialize Kerberos Database..."
/usr/kerberos/sbin/kdb5_util create -r $KRBDOMAIN -s
echo "Creating initial admin roles..."
for x in admin changepw
do
/usr/kerberos/sbin/kadmin.local -q "ktadd -k
$KRBDIR/kadm5.keytab kadmin/$x"
done
echo "Done."
/sbin/service krb5kdc start
/sbin/service kadmin start
echo "Adding Principals..."
for x in krbadm Manager Replicator
do
echo "Adding $x"
if [ "$x" = "krbadm" ]; then
/usr/kerberos/sbin/kadmin.local -q "ank
$x/admin@$KRBDOMAIN"
/usr/kerberos/sbin/kadmin.local -q "ktadd
$x/admin@$KRBDOMAIN"
else
/usr/kerberos/sbin/kadmin.local -q "ank $x@$KRBDOMAIN"
/usr/kerberos/sbin/kadmin.local -q "ktadd $x@$KRBDOMAIN"
fi
done
echo "Adding Network Hosts..."
for x in server1 server2 ...
do
/usr/kerberos/sbin/kadmin.local -q "ank -randkey
host/$x.$KRBFQDN"
/usr/kerberos/sbin/kadmin.local -q "ank -randkey
ldap/$x.$KRBFQDN"
/usr/kerberos/sbin/kadmin.local -q "ktadd host/$x.$KRBFQDN"
/usr/kerberos/sbin/kadmin.local -q "ktadd ldap/$x.$KRBFQDN"
done
echo "Done."
/bin/chmod 644 /etc/krb5.keytab
--------------------------end cut -------------------------
Is the proper way to create the kerberos database? If not, what is the
proper way? What else should I be looking at?
Marcus O.
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
