[24597] in Kerberos
Dump to slave fails;
daemon@ATHENA.MIT.EDU (Yeechang Lee)
Mon Sep 5 17:49:56 2005
From: Yeechang Lee <ylee@pobox.com>
Date: 4 Sep 2005 09:21:21 GMT
Message-ID: <slrndhlf4h.5ut.ylee@pobox.com>
To: kerberos@mit.edu
Errors-To: kerberos-bounces@mit.edu
I've been happily using Kerberos as a single signon on my little home
network for the past 6 1/2 months. In root's crontab on the master KDC
I have a line that calls a shellscript that dumps the database and
calls kprop to distribute it to a slave server every 15 minutes.
Today I noticed that the propagation process last succeeded about ten
days or so, specifically right after the six-month anniversary of my
having started using Kerberos (and having had my primary user's
Kerberos password expire for the first time).
Let us assume I am on realm EXAMPLE.COM in network example.com. When,
on my master KDC, I type
$ sudo kprop -f /var/kerberos/krb5kdc/slave_datatrans \
slave_server.example.com
I am told
/usr/kerberos/sbin/kprop: Password has expired while getting
initial ticket
(And yes, kpropd is already running on slave_server.) Is this a case
of one of the kadmin principals' passwords also having expired? If so,
is it kadmin/admin, kadmin/changepw, kadmin/history, or what? (For
that matter, what are these principals for, anyway?) Or am I
misunderstanding the error message?
On a separate note, when looking through the list of principals, I
noted a mysterious K/M@EXAMPLE.COM I don't remember creating. Based on
Last modified: Thu Feb 24 21:04:42 PST 2005
(db_creation@EXAMPLE.COM)
(The date I started using Kerberos) I presume it's some sort of
administrative entry, but what does it do?
--
<URL:http://www.pobox.com/~ylee/> PERTH ----> *
Homemade 2.8TB RAID 5 storage array:
<URL:http://groups.google.ca/groups?selm=slrnd1g04a.5mt.ylee%40pobox.com>
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
