[24618] in Kerberos
Problem with kpasswd on Solaris
daemon@ATHENA.MIT.EDU (Perez, Ivette)
Fri Sep 9 15:48:48 2005
Message-ID: <1491EF9AA10F59448C70CBE0DC579E9004C47351@camtmx01.merck.com>
From: "Perez, Ivette" <ivette_perez@merck.com>
To: "'kerberos@mit.edu'" <kerberos@mit.edu>
Date: Fri, 9 Sep 2005 11:09:58 -0400
MIME-Version: 1.0
Content-Type: text/plain
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
Hi,
I am new to Kerberos and I have been setting up a test environment to play.
I am having problems changing my principals' password using kpasswd from a
Solaris 8 client. After entering the principal's passwd I receive this
error: Cannot establish a session with the Kerberos administrative server
for realm XXXXXXXXXXX. Database Error! Required KADM5 principal missing.
However, if I run #kpasswd <principal> as root I am able to change the
password. I can also change the password from the Redhat clients so I figure
I am missing something on my Solaris client, maybe permissions???? I really
don't know where to look. Any help would be appreciated.
Additional Info:
KDC: Linux Suse running MIT Kerberos
Log entry when trying kpasswd as principal: Sep 09 10:36:24 kdcserver
krb5kdc[3913](info): AS_REQ (2 etypes {3 1}) CLIENT_IP_ADDRESS:
SERVER_NOT_FOUND: principal@MYREALM.COM for changepw/kdcserver@MYREALM.COM,
Server not found in Kerberos database
Log entry when trying #kpasswd <principal> as root: Sep 09 10:58:03
kdcserver krb5kdc[3913](info): AS_REQ (7 etypes {18 17 16 23 1 3 2})
CLIENT_IP_ADDRESS: ISSUE: authtime 1126277883, etypes {rep=16 tkt=16
ses=16}, principal@MYREALM.COM for kadmin/changepw@MYREALM.COM
Thanks
Ivette Perez
Systems Specialist
Infrastructure Technologies
* ivette_perez@merck.com
------------------------------------------------------------------------------
Notice: This e-mail message, together with any attachments, contains information of Merck & Co., Inc. (One Merck Drive, Whitehouse Station, New Jersey, USA 08889), and/or its affiliates (which may be known outside the United States as Merck Frosst, Merck Sharp & Dohme or MSD and in Japan, as Banyu) that may be confidential, proprietary copyrighted and/or legally privileged. It is intended solely for the use of the individual or entity named on this message. If you are not the intended recipient, and have received this message in error, please notify us immediately by reply e-mail and then delete it from your system.
------------------------------------------------------------------------------
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
