[24570] in Kerberos
adding keys to the client database
daemon@ATHENA.MIT.EDU (Maxwell Bottiger)
Thu Sep 1 00:52:53 2005
Message-ID: <cf497ec50508312151238f664a@mail.gmail.com>
Date: Thu, 1 Sep 2005 00:51:59 -0400
From: Maxwell Bottiger <sleepylight@gmail.com>
To: kerberos@mit.edu
Mime-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Disposition: inline
Errors-To: kerberos-bounces@mit.edu
Content-Transfer-Encoding: 8bit
Hi.
My venture into kerberos setups is going pretty well so far. I've been able
to build a KDC, connect to it, and add keys for my users and for my hosts.
Now however, I'm running into big problems trying to install the keys onto
the client machines. The tutorial I'm following says that after I create the
host keys I should run:
ktadd -k /etc/krb5.keytab host/blah.example.com <http://blah.example.com>
from inside the client side kadmin program. I've done that, but it's not
working right. Here's a transcrip of my session:
[root@minitop ~]# kadmin
Authenticating as principal root/admin@XXXXXXXXXX.NET with password.
Password for root/admin@XXXXXXXXXXX.NET:
kadmin: ktadd -k /etc/krb5.keytab host/minitop.xxxxxxxxxxx.net
kadmin: Insufficient access to lock database while changing
host/minitop.xxxxxxxxxxx.net's key
kadmin: q
I also get this same insufficient access message when I try to change user
passwords with kpasswd. I've looked on google but haven't found much of
anything. Has anyone else run into this problem?
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
