[1867] in Kerberos-V5-bugs
Re: krb5 documentation (or lack thereof)
daemon@ATHENA.MIT.EDU (Sam Hartman)
Thu Apr 11 01:41:19 1996
To: putnamd@MIT.EDU.hayes.com
Cc: krb5-bugs@MIT.EDU
From: Sam Hartman <hartmans@MIT.EDU>
Date: 11 Apr 1996 01:41:06 -0400
In-Reply-To: Dennis Putnam's message of Tue, 9 Apr 1996 09:59:06 -0400 (EDT)
Dennis Putnam <putnamd@atlodbs1.hayes.com> writes:
>
> The more I try to get Kerberos to work and the more problems I encounter the
> more I become convinced I am missing documentation. Where do I find detailed
> information on the kdb5_edit subcommands? The man page basically tells what
> subcommands are legal but there is no description of what the parameters
> are, when and why to use each subcommand, etc. It seems like the documentation
> I have assumes the reader has a significant amount of pre-requisite knowledge.
You are not going to like the answer I give, but the best documentation about kdb5_edit subcommands is the source to kdb5_edit. This is not considered a feature; we haven't had time to write very detailed docs at this time.
You should look at the sources of additional info on Kerberos
listed in the FAQ. Also, note that several vendors sell support for
versions of Kerberos.
> I am having all kinds of problems which appear to be very basic setup issues
> but I cannot find any FAQ or other documentation on operation. For example,
> I cannot use kadmin or kpasswd because, according to the error message, the
> server or client cannot be found in the database. Yet there is nothing in
> the documentation that talks about anything other than users and the example
> service in the database. I have been struggling with this for weeks and need
> help badly. Thanks.
>
There are some web pages for Kerberos installation; I am not
sure where. I have not reviewed any third-party documentation so I
cannot comment on quality or correctness. Your current problem
appears to be a missing changepw service entry that kadmind5 needs in
order to accept requests. Just like all services, the user must
authenticate to the kadmind5 server. This requires it to have a
service entry in the database. I believe this entry is
changepw/hostname@REALM.
--Sam P.S. We are aware of the problems in the documenation. They
are an issue we realize we need to deal with. It is not our desire
that the MIT code require such a large pre-existing set of knowledge,
but it is unfortunately true at the present time.
