[24190] in Kerberos
Solaris 9 PAM problem
daemon@ATHENA.MIT.EDU (Wachdorf, Daniel R)
Thu Jun 30 17:25:35 2005
Content-class: urn:content-classes:message
MIME-Version: 1.0
Date: Wed, 29 Jun 2005 16:36:14 -0600
Message-ID: <80A84CB5E834D4439556D1F64A1FEB83F2CF9D@ES20SNLNT.srn.sandia.gov>
From: "Wachdorf, Daniel R" <drwachd@sandia.gov>
To: kerberos@mit.edu
Content-Type: text/plain;
charset=us-ascii
Errors-To: kerberos-bounces@mit.edu
Content-Transfer-Encoding: 8bit
I am trying to setup pam (with su for starters) on a solaris 9 system.
Its up to date with all the recommended patches.
I have a valid krb5.conf file in /etc/ and sym-linked to
/etc/krb5/krb5.conf. It has the following in libdefaults:
default_tkt_enctypes = des-cbc-crc
default_tgs_enctypes = des-cbc-crc
I created a keytab and symlinked it to /etc/krb5/krb5.keytab.
# klist -e -k /etc/krb5/krb5.keytab
Keytab name: FILE:/etc/krb5/krb5.keytab
KVNO Principal
----
------------------------------------------------------------------------
--
2 host/vmtest2c.sandia.gov@dce.sandia.gov (DES-CBC-CRC)
2 host/vmtest2c.sandia.gov@dce.sandia.gov (DES-CBC-MD5)
I have my /etc/hosts file with (IP address X to protect the innocent):
# cat /etc/hosts
#
# Internet host table
#
127.0.0.1 localhost
134.253.X.X vmtest2c.sandia.gov vmtest2c loghost
I added the following to my pam.conf:
su auth sufficient pam_krb5.so.1
su account sufficient pam_krb5.so.1
When I go to su as a Kerberos account I get:
bash-2.05$ su drwachdz
Enter Kerberos password for drwachdz:
authentication failed: Bad encryption type
The log files show:
Jun 29 16:35:06 vmtest2c su: [ID 537602 auth.error] PAM-KRB5 (auth):
krb5_verify_init_creds failed: Bad encryption type
Any ideas?
-dan
--------------------------------------
Daniel Wachdorf
drwachd@sandia.gov
Sandia National Laboratories
Cyber Security Technologies
505-284-8060
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
