[31828] in Kerberos

home help back first fref pref prev next nref lref last post

RE: unable to get default realm for solaris 10

daemon@ATHENA.MIT.EDU (Mohammad, Meraj)
Thu Dec 31 11:10:36 2009

Content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----_=_NextPart_001_01CA89E1.6A9164F2"
Date: Thu, 31 Dec 2009 11:50:58 +0530
Message-ID: <E1655CE653CA75409D37304B98E1A9C701291E2F@invkx001.in.atosorigin.com>
In-Reply-To: <38352F6E-7AC4-4BB8-8A53-A9F4B9853747@gmail.com>
From: "Mohammad, Meraj" <Meraj.Mohammad@atosorigin.com>
To: "Andrea Cirulli" <acirulli@gmail.com>
Cc: kerberos@mit.edu
Errors-To: kerberos-bounces@mit.edu

This is a multi-part message in MIME format.

------_=_NextPart_001_01CA89E1.6A9164F2
Content-Type: text/plain;
	charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

Hi Andrea,

=20

Thanks for your prompt reply. I have executed  below command as
suggested by you but still I am getting same error. I have seen the log
file and found may error in log. Please see he attached log file. Please
let me help what is the wrong in my configuration.=20

=20

ln -s /etc/krb5.conf /etc/krb5/krb5.conf

truss /usr/local/sbin/kadmin.local > /tmp/kadmin.local.log 2>&1

=20

Regards

Meraj Alam

=20

From: Andrea Cirulli [mailto:acirulli@gmail.com]=20
Sent: Thursday, December 31, 2009 12:00 AM
To: Mohammad, Meraj
Cc: kerberos@mit.edu
Subject: Re: unable to get default realm for solaris 10

=20

Hi,

=20

in what path is your krb5.conf, to be sure that all solaris and mit
tools are reading the same configuration file do this:

=20

ln -s /etc/krb5.conf /etc/krb5/krb5.conf

=20

If even this link does not fix your problem, do this:

=20

truss /usr/local/sbin/kadmin.local > /tmp/kadmin.local.log 2>&1

=20

and then in the output seek where the kadmin.local is looking for the
configuration file you will find some errors like ENOENT

=20

Let me know.

=20

Bye,

Andrea

=20

Il giorno 30/dic/2009, alle ore 18.02, kerberos-request@mit.edu ha
scritto:





Message: 6
Date: Wed, 30 Dec 2009 20:09:36 +0530
From: "Mohammad, Meraj" <Meraj.Mohammad@atosorigin.com>
Subject: unable to get default realm for solaris 10
To: <kerberos@mit.edu>
Message-ID:
          <
E1655CE653CA75409D37304B98E1A9C701291C96@invkx001.in.atosorigin.com>
Content-Type: text/plain;         charset=3D"us-ascii"

i'm trying to setup Kerberos(krb5-1.7)with Solaris 10. While
installation I am getting following error. While running  kadmin.local

/usr/local/sbin/kadmin.local
kadmin.local: unable to get default realm

Following is the my configuration file


Krb5.cof

[libdefaults]

       default_realm =3D EUR.SLB.COM <http://EUR.SLB.COM/>=20



[realms]

       EUR.SLB.COM <http://EUR.SLB.COM/>  =3D {

               kdc =3D nl0107dom11.eur.slb.com
<http://nl0107dom11.eur.slb.com/>=20

               admin_server =3D nl0107dom11.eur.slb.com
<http://nl0107dom11.eur.slb.com/>=20

       }

       NAM.SLB.COM <http://NAM.SLB.COM/>  =3D {

               kdc =3D nl0107dom12.nam.slb.com
<http://nl0107dom12.nam.slb.com/>=20

               admin_server =3D nl0107dom12.nam.slb.com
<http://nl0107dom12.nam.slb.com/>=20

       }

       LAM.SLB.COM <http://LAM.SLB.COM/>  =3D {

               kdc =3D nl0107dom13.lam.slb.com
<http://nl0107dom13.lam.slb.com/>=20

               admin_server =3D nl0107dom13.lam.slb.com
<http://nl0107dom13.lam.slb.com/>=20

       }

       AFR.SLB.COM <http://AFR.SLB.COM/>  =3D {

               kdc =3D nl0107dom14.afr.slb.com
<http://nl0107dom14.afr.slb.com/>=20

               admin_server =3D nl0107dom14.afr.slb.com
<http://nl0107dom14.afr.slb.com/>=20

       }

       MEA.SLB.COM <http://MEA.SLB.COM/>  =3D {

               kdc =3D nl0107dom15.mea.slb.com
<http://nl0107dom15.mea.slb.com/>=20

               admin_server =3D nl0107dom15.mea.slb.com
<http://nl0107dom15.mea.slb.com/>=20

       }

       FEA.SLB.COM <http://FEA.SLB.COM/>  =3D {

               kdc =3D nl0107dom16.fea.slb.com
<http://nl0107dom16.fea.slb.com/>=20

               admin_server =3D nl0107dom16.fea.slb.com
<http://nl0107dom16.fea.slb.com/>=20

       }

       INT.SLB.COM <http://INT.SLB.COM/>  =3D {

               kdc =3D nl0107dom17.int.slb.com
<http://nl0107dom17.int.slb.com/>=20

               admin_server =3D nl0107dom17.int.slb.com
<http://nl0107dom17.int.slb.com/>=20

       }

       SLB.COM <http://SLB.COM/>  =3D {

               kdc =3D nl0107dom18.slb.com <http://nl0107dom18.slb.com/> =


               admin_server =3D nl0107dom18.slb.com
<http://nl0107dom18.slb.com/>=20

       }

[domain_realm]



Kdc.cof

[kdcdefaults]

  kdc_ports =3D 88



[realms]

  EUR.SLB.COM <http://EUR.SLB.COM/>  =3D {

     kadmind_port =3D 749

     max_life =3D 10h 0m 0s

     max_renewable_life =3D 7d 0h 0m 0s

     default_principal_flags =3D +preauth,+forwardable,-postdateable

     master_key_type =3D des-cbc-crc

     supported_enctypes =3D des-cbc-crc:normal

     acl_file =3D /etc/krb5/kadm5.acl=20

}

[logging]

        kdc =3D FILE:/var/log/krb5kdc.log

        admin_server =3D FILE:/var/log/kadmin.log

        default =3D FILE:/var/log/krb5lib.log



kadm5.acl

*/admin@EUR.SLB.COM  *

DKumar7@EUR.SLB.COM  ADMCIL

*/*@EUR.SLB.COM ADMCIL







=20


------_=_NextPart_001_01CA89E1.6A9164F2
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

------_=_NextPart_001_01CA89E1.6A9164F2--


home help back first fref pref prev next nref lref last post