[36094] in Kerberos
Re: Kerberos Digest, Vol 137, Issue 2
daemon@ATHENA.MIT.EDU (Giuseppe Mazza)
Tue May 6 05:57:15 2014
Message-ID: <5368B1ED.3080609@imperial.ac.uk>
Date: Tue, 06 May 2014 10:57:01 +0100
From: Giuseppe Mazza <g.mazza@imperial.ac.uk>
MIME-Version: 1.0
To: kerberos@mit.edu
In-Reply-To: <mailman.355.1399133783.16847.kerberos@mit.edu>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
Hi Kenny,
Sorry, I had forgotten to say that
gml.doc.ic.ac.uk is an alias for gm-u1204.doc.ic.ac.uk.
>
> Shouldn't the kdc for GML.DOC... be "gm-u1204.doc.ic.ac.uk" instead of
> "gml.doc.ic.ac.uk" in your krb5.conf?
>
> Cheers,
>
> Kenny.
However I have tried the change you have suggested, i.e.
to change from gml.doc.ic.ac.uk to gm-u1204.doc.ic.ac.uk
root@gm-u1204:~# grep gm-u1204 /etc/krb5.conf
kdc = gm-u1204.doc.ic.ac.uk
admin_server = gm-u1204.doc.ic.ac.uk
master_kdc = gm-u1204.doc.ic.ac.uk
but it does not work.
I have got a ticket:
mazza@gm-u1204:~$ kinit giuseppe@GMW.DOC.IC.AC.UK
Password for giuseppe@GMW.DOC.IC.AC.UK:
mazza@gm-u1204:~$ klist
Ticket cache: FILE:/tmp/krb5cc_1002
Default principal: giuseppe@GMW.DOC.IC.AC.UK
Valid starting Expires Service principal
06/05/14 10:44:05 06/05/14 20:44:27
krbtgt/GMW.DOC.IC.AC.UK@GMW.DOC.IC.AC.UK
renew until 07/05/14 10:44:05
When I try to
mazza@gm-u1204:~$ ssh -vvv giuseppe@gm-u1204
the same error message occurs, i.e.
----
...
debug1: Next authentication method: gssapi-with-mic
debug1: Unspecified GSS failure. Minor code may provide more information
Cannot find KDC for requested realm
debug1: Unspecified GSS failure. Minor code may provide more information
Cannot find KDC for requested realm
...
----
Thank you all the same,
Giuseppe
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
