[23298] in Kerberos
Re: Cannot resolve network address for KDC in requested realm while
daemon@ATHENA.MIT.EDU (Douglas E. Engert)
Tue Feb 1 13:51:04 2005
Message-ID: <41FFCEE9.5060509@anl.gov>
Date: Tue, 01 Feb 2005 12:48:09 -0600
From: "Douglas E. Engert" <deengert@anl.gov>
MIME-Version: 1.0
To: d_moor@yahoo.com
In-Reply-To: <1107214940.075153.195470@c13g2000cwb.googlegroups.com>
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit
cc: kerberos@mit.edu
Errors-To: kerberos-bounces@mit.edu
d_moor@yahoo.com wrote:
> Sorry, version pasted wasn't edited properly. There were some other
> errors which I fixed. I seem to have narrowed the problem down. kinit
> -k is finding the AD domain controller which created the keytab. It
> is, however, using the wrong principal. If I do a kinit -k
> ADhost.keytab
You need the -t option:
kinit -k -t ADhost.keytab
>
> strace on the RedHat 2.4.9 system shows:
>
> ethereal protocol KRB5 AS-REQ
> Kerberos
> Version: 5
> MSG Type: AS-REQ
> Request
> Options: 0000000000
> Client Name: ADhost.keytab
> Type: Principal
> Name: ADhost.keytab
> Realm: ADDOMAIN.COM
> Server Name: krbtgt
> Type: Unknown
> Name: krbtgt
> Name: ADDOMAIN.COM
> Start Time: 2005-01-31 21:21:33 (Z)
> End Time: 2005-02-01 07:21:33 (Z)
> Random Number: 1107206493
> Encryption Types
> Type: des3-cbc-sha1
> Type: des-cbc-md5
> Type: des-cbc-crc
> Addresses
> Type: IPv4
> Value: 165.2.18.5
>
> Kerberos
> Version: 5
> MSG Type: KRB-ERROR
> stime: 2005-01-31 21:26:39 (Z)
> susec: 349682
> Error Code: KRB5KDC_ERR_C_PRINCIPAL_UNKNOWN
> realm: ADDOMAIN.COM
> sname: krbtgt
> Type: Unknown
> Name: krbtgt
> Name: ADDOMAIN.COM
>
> So it is taking the keytab file name for some reason for the principal
> name. I tried renaming ADhost.keytab ADhost, but now I get a
> segmentation fault.
>
> ________________________________________________
> Kerberos mailing list Kerberos@mit.edu
> https://mailman.mit.edu/mailman/listinfo/kerberos
>
>
>
--
Douglas E. Engert <DEEngert@anl.gov>
Argonne National Laboratory
9700 South Cass Avenue
Argonne, Illinois 60439
(630) 252-5444
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
