[23744] in Kerberos

home help back first fref pref prev next nref lref last post

KRB5 1.4 vs. KRB5 1.3.6 on AIX 5.2

daemon@ATHENA.MIT.EDU (Lamar.Saxon@americredit.com)
Thu Apr 21 14:01:17 2005

Content-Class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: text/plain;
	charset="us-ascii"
Date: Thu, 21 Apr 2005 12:59:45 -0500
Message-ID: <5C066E580F0244458087CC59AC4F74E35EAF57@srvexcharl02.acf.americredit.com>
From: <Lamar.Saxon@americredit.com>
To: <kerberos@mit.edu>
Content-Transfer-Encoding: 8bit
Errors-To: kerberos-bounces@mit.edu


I was hoping someone might be able to help me fix an issue I have
encountered.

I tested KRB5 1.3.6 on AIX 5.2 using C for AIX and the installed make.
Created a krb5.conf and krb5.keytab to talk to a Windows 2k AD Domain
Controller.  Had no issues, connected and received tickets fine.

I recently installed KRB5 1.4 on the same machine after removing the
1.3.6 footprint.  I encountered an issue seen by others with the error:

"Syntax error at line 1 : `(' is not matched"

when using AIX's make; but it seems to work fine using GNU Make.

After compiling and doing a make install, I consistently receive the
following message when using kinit while using the same keytab and
configuration as 1.3.6:

"Cannot resolve network address for KDC in requested realm while getting
initial credentials"

Is there a significant change to krb5.conf between 1.3.6 and 1.4 ?  The
binaries seem to work fine; but it does not look like it is even looking
at the krb5.conf file.  I can change the name or move it and the message
stays the same.  I have tried disabling DNS for realm and kdc; put
master_kdc in the entries; but still does not even act like it is
looking at this file.

Any help is greatly appreciated.

Lamar Saxon				Lamar.Saxon@americredit.com
Lead Server Engineer		817-525-7122

//AmeriCredit
4001 Embarcadero
Arlington ,TX 76014

Privileged and Confidential.  This e-mail, and any attachments there to, is intended only for use by the addressee(s) named herein and may contain privileged or confidential information.  If you have received this e-mail in error, please notify me immediately by a return e-mail and delete this e-mail.  You are hereby notified that any dissemination, distribution or copying of this e-mail and/or any attachments thereto, is strictly prohibited.

________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

home help back first fref pref prev next nref lref last post