[37856] in Kerberos
Problem with db master password migrating kerberos server to new
daemon@ATHENA.MIT.EDU (Rainer Krienke)
Tue Feb 7 03:17:42 2017
To: kerberos@mit.edu
From: Rainer Krienke <krienke@uni-koblenz.de>
Message-ID: <0f0aa7b5-2e01-7f6e-0c44-e9e091102b39@uni-koblenz.de>
Date: Tue, 7 Feb 2017 09:17:26 +0100
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="===============5062945118819502438=="
Errors-To: kerberos-bounces@mit.edu
This is a cryptographically signed message in MIME format.
--===============5062945118819502438==
Content-Type: multipart/signed; protocol="application/pkcs7-signature";
micalg=sha-256; boundary="------------ms090606020302090109020006"
This is a cryptographically signed message in MIME format.
--------------ms090606020302090109020006
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
Hello,
I run a linux machine A with SuSE SLES11SP4 with a working kerberos
server (version 1.6.3) and want to migrate this server to a new linux
SLES12SP2 machine B where the kerberos installation (version 1.12.5) is
a little more recent.
I tried to tar the whole stuff in /var/lib/kerberos/krb5kdc on machine A
and then extract it on machine B. Part of this tar is also the stash
file. /etc/krb5.conf is identical on both machines
Afterwards I am able to run kamin.local and can eg list all the
principals. However I am unable to login using kamin.local -m using my
database master password which works on server A. I see the following
error message if I try on machine B:
kadmin.local: Unable to decrypt latest master key with the provided
master key while initializing kadmin.local interface
Does anyone know why it could not be working, or what I have to do to
get it working again? I do not understand this at the moment. What else
aside from the original db password and the principals could this login
depend on?
Thanks a lot for any help
Rainer
--=20
Rainer Krienke, Uni Koblenz, Rechenzentrum, A22, Universitaetsstrasse 1
56070 Koblenz, Tel: +49261287 1312 Fax +49261287 100 1312
Web: http://userpages.uni-koblenz.de/~krienke
PGP: http://userpages.uni-koblenz.de/~krienke/mypgp.html
--------------ms090606020302090109020006
Content-Type: application/pkcs7-signature; name="smime.p7s"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="smime.p7s"
Content-Description: S/MIME Cryptographic Signature
MIAGCSqGSIb3DQEHAqCAMIACAQExDzANBglghkgBZQMEAgEFADCABgkqhkiG9w0BBwEAAKCC
D9gwggTVMIIDvaADAgECAghQTsb1PRG0ZDANBgkqhkiG9w0BAQsFADBxMQswCQYDVQQGEwJE
RTEcMBoGA1UEChMTRGV1dHNjaGUgVGVsZWtvbSBBRzEfMB0GA1UECxMWVC1UZWxlU2VjIFRy
dXN0IENlbnRlcjEjMCEGA1UEAxMaRGV1dHNjaGUgVGVsZWtvbSBSb290IENBIDIwHhcNMTQw
NzIyMTIwODI2WhcNMTkwNzA5MjM1OTAwWjBaMQswCQYDVQQGEwJERTETMBEGA1UEChMKREZO
LVZlcmVpbjEQMA4GA1UECxMHREZOLVBLSTEkMCIGA1UEAxMbREZOLVZlcmVpbiBQQ0EgR2xv
YmFsIC0gRzAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ZvDZ4X5Da71jVTD
llA1PWLpbkztlNcAW5UidNQg6zSP1uzAMQQLmYHiphTSUqAoI4SLdIkEXlvg4njBeMsWyyg1
OXstkEXQ7aAAeny/Sg4bAMOG6VwrMRF7DPOCJEOMHDiLamgAmu7cT3ir0sYTm3at7t4m6O8B
r3QPwQmi9mvOvdPNFDBP9eXjpMhim4IaAycwDQJlYE3t0QkjKpY1WCfTdsZxtpAdxO3/NYZ9
bzOz2w/FEcKKg6GUXUFr2NIQ9Uz9ylGs2b3vkoO72uuLFlZWQ8/h1RM9ph8nMM1JVNvJEzSa
cXXFbOqnC5j5IZ0nrz6jOTlIaoytyZn7wxLyvQIDAQABo4IBhjCCAYIwDgYDVR0PAQH/BAQD
AgEGMB0GA1UdDgQWBBRJt8bP6D0ff+pEexMp9/EKcD7eZDAfBgNVHSMEGDAWgBQxw3kbuvVT
1xfgiXotF2wKsyudMzASBgNVHRMBAf8ECDAGAQH/AgECMGIGA1UdIARbMFkwEQYPKwYBBAGB
rSGCLAEBBAICMBEGDysGAQQBga0hgiwBAQQDADARBg8rBgEEAYGtIYIsAQEEAwEwDwYNKwYB
BAGBrSGCLAEBBDANBgsrBgEEAYGtIYIsHjA+BgNVHR8ENzA1MDOgMaAvhi1odHRwOi8vcGtp
MDMzNi50ZWxlc2VjLmRlL3JsL0RUX1JPT1RfQ0FfMi5jcmwweAYIKwYBBQUHAQEEbDBqMCwG
CCsGAQUFBzABhiBodHRwOi8vb2NzcDAzMzYudGVsZXNlYy5kZS9vY3NwcjA6BggrBgEFBQcw
AoYuaHR0cDovL3BraTAzMzYudGVsZXNlYy5kZS9jcnQvRFRfUk9PVF9DQV8yLmNlcjANBgkq
hkiG9w0BAQsFAAOCAQEAYyAo/ZwhhnK+OUZZOTIlvKkBmw3Myn1BnIZtCm4ssxNZdbEzkhth
Jxb/w7LVNYL7hCoBSb1mu2YvssIGXW4/buMBWlvKQ2NclbbhMacf1QdfTeZlgk4y+cN8ekvN
TVx07iHydQLsUj7SyWrTkCNuSWc1vn9NVqTszC/Pt6GXqHI+ybxA1lqkCD3WvILDt7cyjrEs
jmpttzUCGc/1OURYY6ckABCwu/xOr24vOLulV0k/2G5QbyyXltwdRpplic+uzPLl2Z9Tsz6h
L5Kp2AvGhB8Exuse6J99tXulAvEkxSRjETTMWpMgKnmIOiVCkKllO3yG0xIVIyn8LNrMOVtU
FzCCBV4wggRGoAMCAQICBxeZn9pX17IwDQYJKoZIhvcNAQELBQAwWjELMAkGA1UEBhMCREUx
EzARBgNVBAoTCkRGTi1WZXJlaW4xEDAOBgNVBAsTB0RGTi1QS0kxJDAiBgNVBAMTG0RGTi1W
ZXJlaW4gUENBIEdsb2JhbCAtIEcwMTAeFw0xNDA1MTkxNTI0NThaFw0xOTA3MDkyMzU5MDBa
MIGCMQswCQYDVQQGEwJERTE5MDcGA1UEChMwUmVnaW9uYWxlcyBIb2Noc2NodWxyZWNoZW56
ZW50cnVtIEthaXNlcnNsYXV0ZXJuMRYwFAYDVQQDEw1SSFJLLUNBIC0gRzAyMSAwHgYJKoZI
hvcNAQkBFhFjYUByaHJrLnVuaS1rbC5kZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAK5AQx3SBrbZDsO1mHSdgYrDp4rh5SQj3qf9KVHk2/UBS2Wqa6HXnkZupBYsdlxpd4eI
pi7u3RsLbvKEUaRnGerZt4tlUqcNc8cZPblFdrDIkRyth1ZDd6lhcKv0QToDxGlTYXReYTM+
0GY2a3V7VzjOCxhvJAWag++UPlNJm7Q2oDi9TSMLSbmN2Kpy/+h76bW+Bd9EQ1VJ2JobFlV/
kQjWjLzta1PYBxzjSAhL/AAD9VykV+C+5Qe+8A6TWS+giJj6fsTx8m51OnvfEI02tyJzuNBP
LAinIV61n6SnrsFvIl0k8IxKe87oUt/aAz8B5jWMzyxBeDTtS0lCitTzRbMCAwEAAaOCAf4w
ggH6MBIGA1UdEwEB/wQIMAYBAf8CAQEwDgYDVR0PAQH/BAQDAgEGMBEGA1UdIAQKMAgwBgYE
VR0gADAdBgNVHQ4EFgQUL90TmGNcC8NvuO2G4AMnwW+6tgIwHwYDVR0jBBgwFoAUSbfGz+g9
H3/qRHsTKffxCnA+3mQwHAYDVR0RBBUwE4ERY2FAcmhyay51bmkta2wuZGUwgYgGA1UdHwSB
gDB+MD2gO6A5hjdodHRwOi8vY2RwMS5wY2EuZGZuLmRlL2dsb2JhbC1yb290LWNhL3B1Yi9j
cmwvY2FjcmwuY3JsMD2gO6A5hjdodHRwOi8vY2RwMi5wY2EuZGZuLmRlL2dsb2JhbC1yb290
LWNhL3B1Yi9jcmwvY2FjcmwuY3JsMIHXBggrBgEFBQcBAQSByjCBxzAzBggrBgEFBQcwAYYn
aHR0cDovL29jc3AucGNhLmRmbi5kZS9PQ1NQLVNlcnZlci9PQ1NQMEcGCCsGAQUFBzAChjto
dHRwOi8vY2RwMS5wY2EuZGZuLmRlL2dsb2JhbC1yb290LWNhL3B1Yi9jYWNlcnQvY2FjZXJ0
LmNydDBHBggrBgEFBQcwAoY7aHR0cDovL2NkcDIucGNhLmRmbi5kZS9nbG9iYWwtcm9vdC1j
YS9wdWIvY2FjZXJ0L2NhY2VydC5jcnQwDQYJKoZIhvcNAQELBQADggEBAN6x/u6FvA4+Sb0t
4oylgwcj8UKWYrKQkQ/7Udycf8K/9s+QejYqMyCO7gL3fa7mcARv1+LZm9rvu9hbMplyUtRP
on3zCXtfC7ElJhNsAutWvzhYp0MlXc9hiSRvk+fchGQEbxIfokb2mrF/KMdI/NCUdpg8I50i
stcwWM5Ox4N4HYAo6gH31rdCPwbIlfph3Tlhv7m5Y7fo+47AqgaG1IsXNcBF8Es80qvrDuV5
+zKrLaU9jvSZLglXMYXClRAwKurxKxKbyS2n8JHeY/pZFGqpz0FPJeOPfgpUV5UXEFEu38tw
tc6YtokdUcHlDKMm6r+/+x+kVN4PnC4hYLLHPH0wggWZMIIEgaADAgECAgca4RE2/sTeMA0G
CSqGSIb3DQEBCwUAMIGCMQswCQYDVQQGEwJERTE5MDcGA1UEChMwUmVnaW9uYWxlcyBIb2No
c2NodWxyZWNoZW56ZW50cnVtIEthaXNlcnNsYXV0ZXJuMRYwFAYDVQQDEw1SSFJLLUNBIC0g
RzAyMSAwHgYJKoZIhvcNAQkBFhFjYUByaHJrLnVuaS1rbC5kZTAeFw0xNjAyMTUwOTAwMjNa
Fw0xOTAyMTQwOTAwMjNaMGQxCzAJBgNVBAYTAkRFMSQwIgYDVQQKDBtVbml2ZXJzaXRhZXQg
S29ibGVuei1MYW5kYXUxFjAUBgNVBAsMDVJlY2hlbnplbnRydW0xFzAVBgNVBAMMDlJhaW5l
ciBLcmllbmtlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8EBhJep8lTNeLbA
N0y7NQSAU0ehXwciCQixT4TbWtCIPyJfyNakduSR0XwP1Ig9Hly1goHKePkRB/dS9kIhgZsu
rO6sDMj/RG4Zw6Wy2MQ0XV58pIlMdnCS631GZOxk19Njd3k9+767wrhOApn+yAyoJPy+w1RN
t0jCiPZgrJeOt6NHfIMJRcmjDGlPRMUEO3RD72cQW3SzVlPC2nvl0WHbV/ZFZbO+AtJRjBPa
fi49sDV8r1zTWIzFIc9MkqlFAS/O+P/IdZdLMPoXQiJ6Ch+MFnABefkPqIjloF7WfJ4PtT1/
I5DGLAVdR/URiAWHWf1yY6aoFiJNt1rF03hAeQIDAQABo4ICLzCCAiswQAYDVR0gBDkwNzAR
Bg8rBgEEAYGtIYIsAQEEAwQwEQYPKwYBBAGBrSGCLAIBBAMBMA8GDSsGAQQBga0hgiwBAQQw
CQYDVR0TBAIwADALBgNVHQ8EBAMCBeAwHQYDVR0lBBYwFAYIKwYBBQUHAwIGCCsGAQUFBwME
MB0GA1UdDgQWBBTwwiVSpv91jF9yH8iXNXOrLdcLszAfBgNVHSMEGDAWgBQv3ROYY1wLw2+4
7YbgAyfBb7q2AjAhBgNVHREEGjAYgRZrcmllbmtlQHVuaS1rb2JsZW56LmRlMH0GA1UdHwR2
MHQwOKA2oDSGMmh0dHA6Ly9jZHAxLnBjYS5kZm4uZGUvcmhyay1jYS9wdWIvY3JsL2dfY2Fj
cmwuY3JsMDigNqA0hjJodHRwOi8vY2RwMi5wY2EuZGZuLmRlL3JocmstY2EvcHViL2NybC9n
X2NhY3JsLmNybDCBzQYIKwYBBQUHAQEEgcAwgb0wMwYIKwYBBQUHMAGGJ2h0dHA6Ly9vY3Nw
LnBjYS5kZm4uZGUvT0NTUC1TZXJ2ZXIvT0NTUDBCBggrBgEFBQcwAoY2aHR0cDovL2NkcDEu
cGNhLmRmbi5kZS9yaHJrLWNhL3B1Yi9jYWNlcnQvZ19jYWNlcnQuY3J0MEIGCCsGAQUFBzAC
hjZodHRwOi8vY2RwMi5wY2EuZGZuLmRlL3JocmstY2EvcHViL2NhY2VydC9nX2NhY2VydC5j
cnQwDQYJKoZIhvcNAQELBQADggEBAKdydwg4btfpn6zlURxNX6wJZ8UnoIXUQsS9ieGJkDcX
ahedrvSJ+fX7k/vj2jSwWDRBrPL4QBPfyO54fm2URTv/0Mg3cnetEH9EIRIOnUC+Yowq34y3
8X1t05Ha/DsD3z7HHYQCZu75UwUcYF74sCNaQb0n3THedCLfRRAGdnhHo9jjn+sIXmstB0Id
xO/UgrCQPihZ20bAkcuD7ZfKf7jY7PGFNFxUS2y6B8lbqASWVLKgk1SzU0rLiL+jUoZxTeyU
4vV/UhWAcjT2H5T8UBehEf6vd2mCSRlWgotZAewYwPPPG3baYl8KInaUL/Nf1ebRjlPbUZzK
rupO+h4LSeAxggPbMIID1wIBATCBjjCBgjELMAkGA1UEBhMCREUxOTA3BgNVBAoTMFJlZ2lv
bmFsZXMgSG9jaHNjaHVscmVjaGVuemVudHJ1bSBLYWlzZXJzbGF1dGVybjEWMBQGA1UEAxMN
UkhSSy1DQSAtIEcwMjEgMB4GCSqGSIb3DQEJARYRY2FAcmhyay51bmkta2wuZGUCBxrhETb+
xN4wDQYJYIZIAWUDBAIBBQCgggIdMBgGCSqGSIb3DQEJAzELBgkqhkiG9w0BBwEwHAYJKoZI
hvcNAQkFMQ8XDTE3MDIwNzA4MTcyNlowLwYJKoZIhvcNAQkEMSIEIPdo6ILu86UZ3iC/PhnH
WXtyhXYL9qhfMoPk+SzBnaR9MGwGCSqGSIb3DQEJDzFfMF0wCwYJYIZIAWUDBAEqMAsGCWCG
SAFlAwQBAjAKBggqhkiG9w0DBzAOBggqhkiG9w0DAgICAIAwDQYIKoZIhvcNAwICAUAwBwYF
Kw4DAgcwDQYIKoZIhvcNAwICASgwgZ8GCSsGAQQBgjcQBDGBkTCBjjCBgjELMAkGA1UEBhMC
REUxOTA3BgNVBAoTMFJlZ2lvbmFsZXMgSG9jaHNjaHVscmVjaGVuemVudHJ1bSBLYWlzZXJz
bGF1dGVybjEWMBQGA1UEAxMNUkhSSy1DQSAtIEcwMjEgMB4GCSqGSIb3DQEJARYRY2FAcmhy
ay51bmkta2wuZGUCBxrhETb+xN4wgaEGCyqGSIb3DQEJEAILMYGRoIGOMIGCMQswCQYDVQQG
EwJERTE5MDcGA1UEChMwUmVnaW9uYWxlcyBIb2Noc2NodWxyZWNoZW56ZW50cnVtIEthaXNl
cnNsYXV0ZXJuMRYwFAYDVQQDEw1SSFJLLUNBIC0gRzAyMSAwHgYJKoZIhvcNAQkBFhFjYUBy
aHJrLnVuaS1rbC5kZQIHGuERNv7E3jANBgkqhkiG9w0BAQEFAASCAQBFPlobEPV9u+rAb18o
z0aNclmYRlWOghFxFdkF4LpcO2l1E+3ugybAFbHxU6wUeMI3W0+DhzecW0NttLX9c4jEGFzJ
Z5wnbcEdlKp0DQtYgIlxnKncxAQx0PPmDpXD3yRW5oWKtwrSIWRMP2+HJ/Nk5yu708TWeLqv
PN5DCETdGrJ5qt7cJ9CMX6VbS2H9+6obeaWCCytJnigd01pkVqqIno7/kyhnSrm/GnE/ehmT
9ojV/0NYYQxq0v/Qx1I+v4qLziWOpMXhc6DZPGLtU4UQPspLV4lpkWnGK11o75tpM39kOKSJ
H3A9ARDynGJAbp5lpwdcOPHHBh7MDHswmZehAAAAAAAA
--------------ms090606020302090109020006--
--===============5062945118819502438==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
--===============5062945118819502438==--
