[31772] in Kerberos
E-mail concerns to - KDC reply did not match expectations /
daemon@ATHENA.MIT.EDU (Drapaniotis, Vangelis (MA))
Mon Dec 14 16:05:37 2009
From: "Drapaniotis, Vangelis (MA)" <Vangelis.Drapaniotis@tntinnight.de>
To: "kerberos@mit.edu" <kerberos@mit.edu>
Date: Mon, 14 Dec 2009 17:39:05 +0100
Message-ID: <86530DFA5B91AB428DC1512AED4663FB1F7F85D4B2@INN068EX106.de.innight.tnt>
Content-Language: de-DE
Content-Type: multipart/mixed;
boundary="_004_86530DFA5B91AB428DC1512AED4663FB1F7F85D4B2INN068EX106de_"
MIME-Version: 1.0
Errors-To: kerberos-bounces@mit.edu
--_004_86530DFA5B91AB428DC1512AED4663FB1F7F85D4B2INN068EX106de_
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
Hallo Paul
I've read up your E-mail concerning " Kerberos error - KDC reply did not m=
atch expectations" dated on Fri Oct 30 2009.
I've got into difficulty after configuring KRB5 on an AIX 5.3 Lpar to acces=
s the KDC on a remote WIn2003 Rel. 2 ADS.
For this constellation, I've added same entries as you've done in the metho=
fs.cfg
KRB5A:
program =3D /usr/lib/security/KRB5A
program_64 =3D /usr/lib/security/KRB5A_64
options =3D authonly,tgt_verify=3Dno,kadmind=3Dno,is_kadmind_compat=
=3Dno
KRB5:
program =3D /usr/lib/security/KRB5
options =3D authonly
I can so far obtain Tickets, after me authorised with kinit from Service pr=
incipal KDC on the Active Directory Server.
The following User entries have been added on to the system after I called =
"mkuser registry=3DKRB5Afiles SYSTEM=3DKRB5Afiles UserXXX".
UserXXX:
admin =3D false
registry =3D KRB5Afiles
SYSTEM =3D "KRB5Afiles"
The /usr/lib/security KRB5 and KRN5_64 modules are O.K, but still the acces=
s (telnet) on the IBM KRB Client using ADS user is denied
by 3004-619 Security method "KRB5Afiles" could not be loaded.
Have you an idea how to sort out the problem.
I' would be deeply grateful to you in case you could send me some tips abou=
t it.
Best regards
Vangelis
E-Mail:
Vangelis.Drapaniotis@tntinnight.de<mailto:Vangelis.Drapaniotis@tntinnight.d=
e>
--_004_86530DFA5B91AB428DC1512AED4663FB1F7F85D4B2INN068EX106de_
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
--_004_86530DFA5B91AB428DC1512AED4663FB1F7F85D4B2INN068EX106de_--
