[29748] in Kerberos
Re: Problem Contact KDC
daemon@ATHENA.MIT.EDU (Ken Raeburn)
Thu Apr 24 12:14:30 2008
From: Ken Raeburn <raeburn@MIT.EDU>
To: <mohamed.chaari@orange-ftgroup.com>
In-Reply-To: <BAF83494CE653943A97B9F755016A06605FE3E08@ftrdmel1>
Message-Id: <060DB15D-2BEE-4D71-9360-E52089368E85@MIT.EDU>
Mime-Version: 1.0 (Apple Message framework v919.2)
Date: Thu, 24 Apr 2008 12:11:22 -0400
Cc: kerberos@MIT.EDU
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@MIT.EDU
On Apr 24, 2008, at 10:08, <mohamed.chaari@orange-ftgroup.com> wrote:
> In the files krb5.conf, I wrote:
>
> ....
> [realms]
> EXAMPLE.COM = {
> kdc = kerberos.example.com:88
> admin_server = kerberos.example.com:749
> default_domain = example.com
> }
> ....
>
> I understood that when the client ask for a ticket, it extract the
> kdc address from krb5.conf (kerberos.example.com).
Okay, in that case, yes, if EXAMPLE.COM is the realm being used, it
would try to talk to kerberos.example.com.
Did you specify "default_realm = EXAMPLE.COM" in the libdefaults
section of the config file, or in a principal name on the command
line? You didn't provide either in your report.
Is the KDC process, in fact, running, and does netstat show it
listening?
Ken
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos