[23090] in Kerberos
Re: KRB5 against Win2003
daemon@ATHENA.MIT.EDU (Douglas E. Engert)
Thu Dec 23 10:38:09 2004
Message-ID: <41CAE590.9030601@anl.gov>
Date: Thu, 23 Dec 2004 09:34:40 -0600
From: "Douglas E. Engert" <deengert@anl.gov>
MIME-Version: 1.0
To: Rainer Budde <budde@prodas.de>
In-Reply-To: <cqc8qp$6gn$02$1@news.t-online.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 8bit
cc: kerberos@mit.edu
Errors-To: kerberos-bounces@mit.edu
Rainer Budde wrote:
> Hi,
>
> I want to use Kerberos on a SuSE 9.1 system to authentificate against a
> Win2003 Server. I modified the configuration file like this:
>
> -------------------------------
> [libdefaults]
> default_realm = PRODAS.LOCAL
> clockskew = 300
>
> [realms]
> PRODAS.LOCAL = {
> # kdc = PDS-AD.PRODAS.LOCAL
Uncomment the above line.
> # admin_server = MY.COMPUTER
> # kpasswd_server = MY.COMPUTER
> }
> # OTHER.REALM = {
> # kdc = OTHER.COMPUTER
> # }
>
> [domain_realm]
> PDS-AD.PRODAS.LOCAL = PRODAS.LOCAL
>
> [logging]
> default = SYSLOG:NOTICE:DAEMON
> kdc = FILE:/var/log/kdc.log
> kadmind = FILE:/var/log/kadmind.log
>
> [appdefaults]
> pam = {
> ticket_lifetime = 1d
> renew_lifetime = 1d
> forwardable = true
> proxiable = false
> retain_after_close = false
> minimum_uid = 0
> debug = false
> --------------------------------
>
> If I use "kinit ADMINISTRATOR@PRODAS.LOCAL" iŽll get the following message:
>
> ----------------
> kinit: krb5_get_init_creds: unable to reach any KDC in realm PRODAS.LOCAL
> ----------------
>
> My domain is "prodas". The hostname is "pds-ad.prodas.local". Is
> PRODAS.LOCAL the correct realm??? Does anybody know whats wrong??
The client needs the KDC name either from the krb5.conf file or
via DNS SRV records.
>
> Best regards
>
> Rainer
>
>
> ________________________________________________
> Kerberos mailing list Kerberos@mit.edu
> https://mailman.mit.edu/mailman/listinfo/kerberos
>
>
>
--
Douglas E. Engert <DEEngert@anl.gov>
Argonne National Laboratory
9700 South Cass Avenue
Argonne, Illinois 60439
(630) 252-5444
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
