[6221] in Kerberos
Re: Problem getting V4 working..
daemon@ATHENA.MIT.EDU (Simon Travaglia, Analyst/Programme)
Mon Nov 13 22:25:09 1995
To: kerberos@MIT.EDU
Date: 14 Nov 95 15:34:17 +1300
From: spt@waikato.ac.nz (Simon Travaglia, Analyst/Programmer)
In article <483g5p$94t@usenet.rpi.edu>, wilmesj@sage4g.its.rpi.edu (Josh Wilmes) writes:
>
> Okay, I have a little more information.
>
> The error I was getting before was due to a kerb5 setting in /etc/services.
> So now I can kinit successfully.
>
> Here's a session:
>
> josh@galactic:~% kinit
> Rensselaer Polytechnic Institute (galactic)
> Kerberos Initialization
> Kerberos name: wilmesj
> Password:
> josh@galactic:~% klist
> Ticket file: /tmp/tkt501
> Principal: wilmesj@RPI.EDU
>
> Issued Expires Principal
> Nov 11 19:40:21 Nov 12 05:40:21 krbtgt.RPI.EDU@RPI.EDU
>
> Looks good, but now if I try to aklog (to get an AFS token), I get this:
>
> aklog: Couldn't get rpi.edu AFS tickets: Principal expired (kerberos)
>
Ok, are the clocks between the kerberos server and the kerberized service
synchronised? Typically you've got some amount of minutes to use the
ticket you obtained for a service. The non-application of daylight savings
time on a machine can cause problems like this to suddenly appear (around
daylight savings time of course)
+----------------------------+
| +-----+ Digitally Enhanced | This space intentionally blank for notetaking.
| |-O-O-| Portrait of: |
| | % | Simon Travaglia, |
| | --- | Analyst/Programmer |
| +-----+ Waikato University |
+----------------------------+
Fertility is hereditary. If your parents didn't have any children,
neither will you.
