[22761] in Kerberos
Re: validating keytab files: Cannot find KDC for requested realm
daemon@ATHENA.MIT.EDU (Hooshang Dadgari)
Tue Oct 26 20:49:33 2004
Message-ID: <3c1d60f8041026174653b972c9@mail.gmail.com>
Date: Tue, 26 Oct 2004 17:46:27 -0700
From: Hooshang Dadgari <hooshang.dadgari@gmail.com>
To: Frank Balluffi <frank.balluffi@db.com>
In-Reply-To: <OF2F3EC0A7.CFE48F26-ON85256F39.006FEB7E@db.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
cc: kerberos@mit.edu
Reply-To: Hooshang Dadgari <hooshang.dadgari@gmail.com>
Errors-To: kerberos-bounces@mit.edu
Check your krb5kdc.log file for any hint!
Hooshang
On Tue, 26 Oct 2004 16:39:22 -0400, Frank Balluffi
<frank.balluffi@db.com> wrote:
> I am able to validate (test) keytab files for service1/host1.us.foo.com@FOO.COM and service2/host2.us.foo.com@FOO.COM using the command "kinit -5 -k -t keytab-file service-principal" from host1.us.foo.com, but when I try to validate a keytab file for service3/host3.au.foo.com@FOO.COM from host1.us.foo.com I get the following error:
>
> kinit(v5): Cannot find KDC for requested realm while getting initial credentials
>
> krb5.conf says:
>
> [realms]
> FOO.COM = {
> kdc = ...foo.com:88
> ...
> }
>
> [domain_realm]
> .foo.com = FOO.COM
>
> Is this behavior expected? Do I need to be "on" a host in .au.foo.com to validate a keytab for service3/host3.au.foo.com@FOO.COM? Thanks.
>
> Frank
>
> --
>
> This e-mail may contain confidential and/or privileged information. If you are not the intended recipient (or have received this e-mail in error) please notify the sender immediately and destroy this e-mail. Any unauthorized copying, disclosure or distribution of the material in this e-mail is strictly forbidden.
>
> ________________________________________________
> Kerberos mailing list Kerberos@mit.edu
> https://mailman.mit.edu/mailman/listinfo/kerberos
>
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
