[896] in Kerberos
general kerberos problems
daemon@ATHENA.MIT.EDU (John T Kohl)
Fri Mar 30 10:12:54 1990
From: John T Kohl <jtkohl@ATHENA.MIT.EDU>
To: cocchi%jerico.usc.edu@USC.EDU (Ron Cocchi)
Cc: kerberos@ATHENA.MIT.EDU
In-Reply-To: cocchi%jerico.usc.edu@USC.EDU's message of 30 Mar 90 02:16:15 GMT
> From: cocchi%jerico.usc.edu@USC.EDU (Ron Cocchi)
> Date: 30 Mar 90 02:16:15 GMT
> cocchi@kamalot(57):rlogin kamalot
> rlogin: Host kamalot.usc.edu isn't registered for Kerberos rlogin service
This indicates that the name rlogin thinks it should use isn't in the
database. Try tracing the krb_sendauth() call to see what principal
name it's looking for. It might be a case-sensitivity confusion with
the realm, or it might be something else.
> 2.) As I stated above, I am able to authenticate the sample
> server/client. But when I tried turning on debug I could not
> authenticate to test.test.
> I entered the principal test with
> instance test and remade /etc/srvtab. (I don't believe a new
> srvtab was necessary.)
It might be necessary; the server needs to have the key for
test.test@usc.edu in the srvtab file. Try klist -srvtab to see if it is
there; if it's not, that could be the problem.
> One more thing I would like to mention that I discovered when playing
> with rlogin. Executing rlogin on a Sun 3/60 produces a segmentation
> fault instead on unknown host on a null host name.
If you could send a context diff (with line numbers) to
kerberos-bugs@athena.mit.edu (possibly cc'ed here for other people's
edification), we'll update our sources here at Athena.
John Kohl <jtkohl@ATHENA.MIT.EDU> or <jtkohl@Kolvir.Brookline.MA.US>
Digital Equipment Corporation/Project Athena