[23534] in Kerberos
Newbie: "Server not found in Kerberos database"
daemon@ATHENA.MIT.EDU (Michael Urban)
Tue Mar 15 17:05:33 2005
From: urban@panix.com (Michael Urban)
Date: 15 Mar 2005 14:50:49 -0500
Message-ID: <d17eap$ejf$1@panix5.panix.com>
To: kerberos@mit.edu
Errors-To: kerberos-bounces@mit.edu
I am still in 'toy installation mode'. I have set up a KDC
on a Linux machine, call it kervara.mygroup.org I have successfully
set things up to the point that I can kinit from various clients.
I have also set up OpenSSH 3.9p1 to use GSSAPI authentication.
When I am logged into kervara, and have a valid TGT from this
realm, I can successfully ssh into kervara.mygroup.org without
a password; the keytab contains entries for the host/kervara.mygroup.org
principal. This is the way things are supposed to work. Life is good.
The problem comes when I attempt to do the same thing with the same
version of OpenSSH built with the same options on a Solaris machine.
In that case, the server logs a "Server not found in Kerberos database"
message and gives up. I have looked at all the obvious candidates
(wrong DNS entry, disagreement as to host name in /etc/hosts and
DNS, etc) and come up empty.
Unfortunately, the log messages do not tell me _what_ principal it
was trying to find in krb5.keytab (I assume that this is where
the mismatch or missing entry is).
Is there a way to squeeze more diagnostic information? Or does
this sound like a familiar problem?
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
