[31828] in Kerberos
RE: unable to get default realm for solaris 10
daemon@ATHENA.MIT.EDU (Mohammad, Meraj)
Thu Dec 31 11:10:36 2009
Content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----_=_NextPart_001_01CA89E1.6A9164F2"
Date: Thu, 31 Dec 2009 11:50:58 +0530
Message-ID: <E1655CE653CA75409D37304B98E1A9C701291E2F@invkx001.in.atosorigin.com>
In-Reply-To: <38352F6E-7AC4-4BB8-8A53-A9F4B9853747@gmail.com>
From: "Mohammad, Meraj" <Meraj.Mohammad@atosorigin.com>
To: "Andrea Cirulli" <acirulli@gmail.com>
Cc: kerberos@mit.edu
Errors-To: kerberos-bounces@mit.edu
This is a multi-part message in MIME format.
------_=_NextPart_001_01CA89E1.6A9164F2
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
Hi Andrea,
=20
Thanks for your prompt reply. I have executed below command as
suggested by you but still I am getting same error. I have seen the log
file and found may error in log. Please see he attached log file. Please
let me help what is the wrong in my configuration.=20
=20
ln -s /etc/krb5.conf /etc/krb5/krb5.conf
truss /usr/local/sbin/kadmin.local > /tmp/kadmin.local.log 2>&1
=20
Regards
Meraj Alam
=20
From: Andrea Cirulli [mailto:acirulli@gmail.com]=20
Sent: Thursday, December 31, 2009 12:00 AM
To: Mohammad, Meraj
Cc: kerberos@mit.edu
Subject: Re: unable to get default realm for solaris 10
=20
Hi,
=20
in what path is your krb5.conf, to be sure that all solaris and mit
tools are reading the same configuration file do this:
=20
ln -s /etc/krb5.conf /etc/krb5/krb5.conf
=20
If even this link does not fix your problem, do this:
=20
truss /usr/local/sbin/kadmin.local > /tmp/kadmin.local.log 2>&1
=20
and then in the output seek where the kadmin.local is looking for the
configuration file you will find some errors like ENOENT
=20
Let me know.
=20
Bye,
Andrea
=20
Il giorno 30/dic/2009, alle ore 18.02, kerberos-request@mit.edu ha
scritto:
Message: 6
Date: Wed, 30 Dec 2009 20:09:36 +0530
From: "Mohammad, Meraj" <Meraj.Mohammad@atosorigin.com>
Subject: unable to get default realm for solaris 10
To: <kerberos@mit.edu>
Message-ID:
<
E1655CE653CA75409D37304B98E1A9C701291C96@invkx001.in.atosorigin.com>
Content-Type: text/plain; charset=3D"us-ascii"
i'm trying to setup Kerberos(krb5-1.7)with Solaris 10. While
installation I am getting following error. While running kadmin.local
/usr/local/sbin/kadmin.local
kadmin.local: unable to get default realm
Following is the my configuration file
Krb5.cof
[libdefaults]
default_realm =3D EUR.SLB.COM <http://EUR.SLB.COM/>=20
[realms]
EUR.SLB.COM <http://EUR.SLB.COM/> =3D {
kdc =3D nl0107dom11.eur.slb.com
<http://nl0107dom11.eur.slb.com/>=20
admin_server =3D nl0107dom11.eur.slb.com
<http://nl0107dom11.eur.slb.com/>=20
}
NAM.SLB.COM <http://NAM.SLB.COM/> =3D {
kdc =3D nl0107dom12.nam.slb.com
<http://nl0107dom12.nam.slb.com/>=20
admin_server =3D nl0107dom12.nam.slb.com
<http://nl0107dom12.nam.slb.com/>=20
}
LAM.SLB.COM <http://LAM.SLB.COM/> =3D {
kdc =3D nl0107dom13.lam.slb.com
<http://nl0107dom13.lam.slb.com/>=20
admin_server =3D nl0107dom13.lam.slb.com
<http://nl0107dom13.lam.slb.com/>=20
}
AFR.SLB.COM <http://AFR.SLB.COM/> =3D {
kdc =3D nl0107dom14.afr.slb.com
<http://nl0107dom14.afr.slb.com/>=20
admin_server =3D nl0107dom14.afr.slb.com
<http://nl0107dom14.afr.slb.com/>=20
}
MEA.SLB.COM <http://MEA.SLB.COM/> =3D {
kdc =3D nl0107dom15.mea.slb.com
<http://nl0107dom15.mea.slb.com/>=20
admin_server =3D nl0107dom15.mea.slb.com
<http://nl0107dom15.mea.slb.com/>=20
}
FEA.SLB.COM <http://FEA.SLB.COM/> =3D {
kdc =3D nl0107dom16.fea.slb.com
<http://nl0107dom16.fea.slb.com/>=20
admin_server =3D nl0107dom16.fea.slb.com
<http://nl0107dom16.fea.slb.com/>=20
}
INT.SLB.COM <http://INT.SLB.COM/> =3D {
kdc =3D nl0107dom17.int.slb.com
<http://nl0107dom17.int.slb.com/>=20
admin_server =3D nl0107dom17.int.slb.com
<http://nl0107dom17.int.slb.com/>=20
}
SLB.COM <http://SLB.COM/> =3D {
kdc =3D nl0107dom18.slb.com <http://nl0107dom18.slb.com/> =
admin_server =3D nl0107dom18.slb.com
<http://nl0107dom18.slb.com/>=20
}
[domain_realm]
Kdc.cof
[kdcdefaults]
kdc_ports =3D 88
[realms]
EUR.SLB.COM <http://EUR.SLB.COM/> =3D {
kadmind_port =3D 749
max_life =3D 10h 0m 0s
max_renewable_life =3D 7d 0h 0m 0s
default_principal_flags =3D +preauth,+forwardable,-postdateable
master_key_type =3D des-cbc-crc
supported_enctypes =3D des-cbc-crc:normal
acl_file =3D /etc/krb5/kadm5.acl=20
}
[logging]
kdc =3D FILE:/var/log/krb5kdc.log
admin_server =3D FILE:/var/log/kadmin.log
default =3D FILE:/var/log/krb5lib.log
kadm5.acl
*/admin@EUR.SLB.COM *
DKumar7@EUR.SLB.COM ADMCIL
*/*@EUR.SLB.COM ADMCIL
=20
------_=_NextPart_001_01CA89E1.6A9164F2
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
------_=_NextPart_001_01CA89E1.6A9164F2--