[23750] in Kerberos
Problems with my kerberos config
daemon@ATHENA.MIT.EDU (Maxime Pejot)
Thu Apr 21 15:26:29 2005
Content-class: urn:content-classes:message
MIME-Version: 1.0
Date: Thu, 21 Apr 2005 17:39:21 +0200
Message-ID: <256FEA6D80DE934EB638E4ED10892544011A6BE3@CBH28>
From: "Maxime Pejot" <maxime.pejot@mckesson.fr>
To: <kerberos@mit.edu>
Content-Type: text/plain;
charset="us-ascii"
Errors-To: kerberos-bounces@mit.edu
Content-Transfer-Encoding: 8bit
Hello, and at first I apologize for my ignorance.
I have encountered some problems with my Kerberos 5 configuration.
I'd like to use an AD authentication base on my LINUX server.
Here is my configuration file krb5.conf :
[logging]
default = FILE:/var/log/krb5libs.log
kdc = FILE:/var/log/krb5kdc.log
admin_server = FILE:/var/log/kadmind.log
[libdefaults]
ticket_lifetime = 24000
default_realm = DOMAIN
dns_lookup_realm = false
dns_lookup_kdc = false
[realms]
DOMAIN = {
kdc = XX.XX.XX.XX:88
admin_server = kerberos.example.com:749
default_domain = domain (I tried DOMAIN too...)
}
[domain_realm]
.domain = DOMAIN
domain = DOMAIN
[kdc]
profile = /var/kerberos/krb5kdc/kdc.conf
[appdefaults]
pam = {
debug = false
ticket_lifetime = 36000
renew_lifetime = 87000
forwardable = true
krb4_convert = false
}
I think I am right with that, but as I type the command:
# /usr/Kerberos/bin/kinit Nuser@DOMAIN
I get the password prompt, I enter it (respecting the case), and I get
this error :
KDC reply did not match expectations while getting initial credentials.
I don't know what it means. I tried lots of stuffs, like Caps changing
in domain name, realm and nuser, but it doesn't work
Thanks by advance for your help and understanding
Max.
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
