[36660] in Kerberos
Re: Incremental database propagation kpropd error
daemon@ATHENA.MIT.EDU (Benjamin Kaduk)
Fri Dec 5 17:05:11 2014
Date: Fri, 5 Dec 2014 17:04:59 -0500 (EST)
From: Benjamin Kaduk <kaduk@mit.edu>
To: Antonio Senatore <bacco1977@gmail.com>
In-Reply-To: <CAATH9R0kn95AC0iuEC6otgJFPhvtJ3CuOLb1k=q6p+L7zGwJnw@mail.gmail.com>
Message-ID: <alpine.GSO.1.10.1412051703540.23489@multics.mit.edu>
MIME-Version: 1.0
Cc: kerberos@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
On Fri, 5 Dec 2014, Antonio Senatore wrote:
> Hello everybody.
> I do hope this is the correct mailing list.
>
> I have configure kerberos incremental propagation using this guide here:
>
> https://www.soljerome.com/blog/2013/01/12/mit-incremental-database-propagation/
>
>
> I have one master and one slave KDC, likewise the guide.
>
>
> However, when I run the kpropd daemon in standalone (debugging mode), I get
> the following message:
>
>
>
> kpropd: Incorrect password while initializing kpropd interface, retrying
>
>
> It auggests that the kprop daemon cannot authenticate, but I'm not sure
> where the problem lies.
Check that the system keytab (/etc/krb5.keytab) on both master and slave
contains the host/f.q.d.n principal corresponding to the machine in
question, and that the machines and the (reverse) DNS all agree on the
hostnames involved, and that they are fully-qualified.
-Ben Kaduk
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
