[2468] in Kerberos
Re: Moira client
daemon@ATHENA.MIT.EDU (Shawn Mamros)
Tue Dec 15 16:58:31 1992
Date: 15 Dec 92 18:06:49 GMT
From: mamros@athena.lkg.dec.com (Shawn Mamros)
Reply-To: mamros@athena.lkg.dec.com (Shawn Mamros)
To: kerberos@shelby.Stanford.EDU
alan@curta.cc.columbia.edu (Alan Crosswell) writes:
>In article <1992Dec10.234739.9133@ericsson.se> monica@netman.ericsson.se
>(Monica Bouchibane) writes:
>> I'm trying to include Moira (SMS) in our kerberized environment,
>> but I'm having some problems with the moira client(s)
>>
>> The serverside seems to be running OK, but whenever I try to start
>> the client (moira, dcmmaint, listmaint....) I have mainly two things
>> showing up.
>> .....moira: Kerberos error: Can't decode authenticator
>> .....Authorization failed -- please run kinit
>> .....Exit 1
[...]
>Check for principal name 'moira' vs. 'sms.' As I recall, there are a couple
>places in the code where these are used interchangeably. This is probably
>because after the code had been called sms for a while, they decided to
>rename it Moira and some of the code still refers to it the old way. The
>easy fix is to create two princpals: "moira.myserver" and "sms.myserver" with
>the same key.
I'm about 99% sure that the two principals needed are "moira.myserver" and
"sms" (null instance name), and that they don't need the same key at all.
"moira.myserver" is used for Moira client-server authentication, while "sms"
is used by the data control manager (DCM) to authenticate to hosts running
the update_server process (those hosts, in turn, need an "rcmd.hostname" key).
-Shawn Mamros
E-mail to: mamros@athena.lkg.dec.com
