[29748] in Kerberos

home help back first fref pref prev next nref lref last post

Re: Problem Contact KDC

daemon@ATHENA.MIT.EDU (Ken Raeburn)
Thu Apr 24 12:14:30 2008

From: Ken Raeburn <raeburn@MIT.EDU>
To: <mohamed.chaari@orange-ftgroup.com>
In-Reply-To: <BAF83494CE653943A97B9F755016A06605FE3E08@ftrdmel1>
Message-Id: <060DB15D-2BEE-4D71-9360-E52089368E85@MIT.EDU>
Mime-Version: 1.0 (Apple Message framework v919.2)
Date: Thu, 24 Apr 2008 12:11:22 -0400
Cc: kerberos@MIT.EDU
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@MIT.EDU

On Apr 24, 2008, at 10:08, <mohamed.chaari@orange-ftgroup.com> wrote:
> In the files krb5.conf, I wrote:
>
> ....
> [realms]
> EXAMPLE.COM = {
> kdc = kerberos.example.com:88
> admin_server = kerberos.example.com:749
> default_domain = example.com
> }
> ....
>
> I understood that when the client ask for a ticket, it extract the  
> kdc address from krb5.conf (kerberos.example.com).

Okay, in that case, yes, if EXAMPLE.COM is the realm being used, it  
would try to talk to kerberos.example.com.

Did you specify "default_realm = EXAMPLE.COM" in the libdefaults  
section of the config file, or in a principal name on the command  
line?  You didn't provide either in your report.

Is the KDC process, in fact, running, and does netstat show it  
listening?

Ken
________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

home help back first fref pref prev next nref lref last post