|
|
|
|
|
|
|
|
|
|
|
|
| home | help | back | first | fref | pref | prev | next | nref | lref | last | post |
From: Donn Cave <donn@u.washington.edu> Date: Fri, 21 Jan 2005 09:17:12 -0800 Message-ID: <donn-E6C16F.09171221012005@gnus01.u.washington.edu> To: kerberos@mit.edu Errors-To: kerberos-bounces@mit.edu In article <1106262399.697619.93400@f14g2000cwb.googlegroups.com>, David.Moor@oracle.com wrote: > kinit test > Password for test@host.COM: ... > However, I can't kinit using this keytab file: > > [root@host/var/kerberos/krb5kdc]$ kinit -k kadm5test > kinit(v5): Cannot resolve network address for KDC in requested realm > while getting initial credentials In the course of this message you don't show the same realm twice, for a total of four different realms (host.COM is not the same realm as HOST.COM.) If that's really the case, I believe it could account for the error shown above. You may find some details on this in the KDC syslog. The kadmin function that populates a keytab does create a new key version, so the old one is no longer valid for new ticket requests. That's normally a feature. If you want to store the key for a typeable password in a keytab, I believe you can use ktutil for this. Donn Cave, donn@u.washington.edu > klist shows: > > [root@bde-idm3 /var/kerberos/krb5kdc]$ klist > Ticket cache: FILE:/tmp/krb5cc_0 > Default principal: test@BDE-IDM3.US.ORACLE.COM > > Valid starting Expires Service principal > 01/20/05 14:53:59 01/21/05 00:53:59 krbtgt/HOST.COM@HOST.COM > > > Kerberos 4 ticket cache: /tmp/tkt0 > klist: You have no tickets cached > > A secondary problem is now the password seems to have been changed > after creating the keytab, and I can no longer kinit (without the > keytab): > > [root@host /var/kerberos/krb5kdc]$ kinit test > Password for test@host.US.ORACLE.COM: > kinit(v5): Password incorrect while getting initial credentials > > For testing purposes I'm using my hostname as my realm name. I've > tried logging in as root and as test, but get the same result. > ________________________________________________ Kerberos mailing list Kerberos@mit.edu https://mailman.mit.edu/mailman/listinfo/kerberos
|
|
|
|
|
|
|
|
|
|
|
|
| home | help | back | first | fref | pref | prev | next | nref | lref | last | post |