[31848] in Kerberos

home help back first fref pref prev next nref lref last post

Is there any relation beetween KRB5_KDC_UNREACH error code and

daemon@ATHENA.MIT.EDU (Sylvain RICHET)
Mon Jan 4 13:03:55 2010

From: Sylvain RICHET <akamanouche@gmail.com>
Date: Mon, 4 Jan 2010 09:25:07 -0800 (PST)
Message-ID: <7f5db8ae-d69b-4b95-a069-ad2318a198ad@e37g2000yqn.googlegroups.com>
Mime-Version: 1.0
X-Complaints-To: groups-abuse@google.com
Complaints-To: groups-abuse@google.com
To: kerberos@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu

Hi Everyone
Happy New Year !

I'm trying to access a webapp (Apache2 + mod_auth_kerb) via Firefox
(NegociateAuth library, about:config negociate.nego*), protected by a
Kerberos Realm

In the /var/log/apache2/error.log, this error :
[...]
[Mon Jan 04 16:29:20 2010] [debug] src/mod_auth_kerb.c(691): [client
127.0.0.1] Trying to get TGT for user srichet@BEEWAREKERB
[Mon Jan 04 16:29:21 2010] [error] [client 127.0.0.1]
krb5_get_init_creds_password() failed: Cannot resolve network address
for KDC in requested realm
[...]

I realized that in /etc/krb5.conf, directive "dns_lookup_kdc" is set
to false.

==> So, my  question :
is there any relation beetween this error code (KRB5_KDC_UNREACH) and
the "dns_lookup_kdc" directive ?

Thanks in advance
________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

home help back first fref pref prev next nref lref last post