[2653] in Kerberos-V5-bugs
pending/362: Frustrated!! Is there anyone reading this mail list?
daemon@ATHENA.MIT.EDU (Michael Robinton)
Tue Feb 4 11:02:48 1997
Resent-From: gnats@rt-11.MIT.EDU (GNATS Management)
Resent-To: gnats-admin@rt-11.MIT.EDU
Resent-Reply-To: krb5-bugs@MIT.EDU, petals@girlswear.com
Date: Mon, 3 Feb 1997 21:40:25 +0000
From: "Michael Robinton" <petals@girlswear.com>
Reply-To: petals@girlswear.com
To: krb5-bugs@MIT.EDU
>Number: 362
>Category: pending
>Synopsis: Frustrated!! Is there anyone reading this mail list?
>Confidential: yes
>Severity: serious
>Priority: medium
>Responsible: gnats-admin
>State: open
>Class: sw-bug
>Submitter-Id: unknown
>Arrival-Date: Tue Feb 04 11:02:01 EST 1997
>Last-Modified:
>Originator:
>Organization:
>Release:
>Environment:
>Description:
>How-To-Repeat:
>Fix:
>Audit-Trail:
>Unformatted:
Below is the complete configuration and install
sequence I used for krb5-1.0
I always get an error when trying to propagate
the database to the slave kdc's using kprop/
I can't figure out what I have done wrong.
I suspect that it has something to do with
principal/instance@realm but I'm stumped
any assistance would be appreciated
-----------------------------------------
logged in as user 'root' on host pandora
kmaster CNAME pandora
kslave2 CNAME wormhole
kslave1 CNAME knothole
--------------/etc/krb5.conf-------------
[libdefaults]
ticket_lifetime = 600
default_realm = PETALSHOME.COM
default_tkt_enctypes = des-cbc-crc
default_tgs_enctypes = des-cbc-crc
[realms]
PETALSHOME.COM = {
kdc = kmaster.petalshome.com:88
kdc = kslave1.petalshome.com:88
kdc = kslave2.petalshome.com:88
admin_server = kmaster.petalshome.com:749
default_domain = petalshome.com
}
[domain_realm]
.petalshome.com = PETALSHOME.COM
petalshome.com = PETALSHOME.COM
[kdc]
profile = /usr/local/var/krb5kdc/kdc.conf
[logging]
kdc = FILE:/var/adm/krb5kdc.log
admin_server = FILE:/var/adm/kadmin.log
-------------------------------------------
-----/usr/local/var/krb5kdc/kdc.conf-------
[kdcdefaults]
kdc_ports = 88,750
[realms]
PETALSHOME.COM = {
profile = /etc/krb5.conf
database_name = /usr/local/var/krb5kdc/principal
admin_database_name = /usr/local/var/krb5kdc/principal.kadm5
admin_database_lockfile =
/usr/local/var/krb5kdc/principal.kadm5.lock admin_keytab =
/usr/local/var/krb5kdc/kadm5.keytab acl_file =
/usr/local/var/krb5kdc/kadm5.acl dict_file =
/usr/local/var/krb5kdc/kadm5.dict key_stash_file =
/usr/local/var/krb5kdc/.k5.PETALSHOME.COM kadmind_port = 749
max_life = 10h 0m 0s max_renewable_life = 7d 0h 0m 0s
master_key_type = des-cbc-crc supported_enctypes =
des-cbc-crc:normal
}
--------------------------------------------
pandora:/# /usr/local/sbin/kdb5_util create -r PETALSHOME.COM -s
Initializing database '/usr/local/var/krb5kdc/principal' for realm
'PETALSHOME.COM', master key name 'K/M@PETALSHOME.COM' You will be
prompted for the database Master Password. It is important that you
NOT FORGET this password. Enter KDC database master key: Re-enter KDC
database master key to verify:
--------------kadm5.acl--------------------- root/admin@PETALSHOME.COM
* sysadm/admin@PETALSHOME.COM *
-------------------------------------------- pandora:/#
/usr/local/sbin/kadmin.local kadmin.local: addprinc
sysadm/admin@PETALSHOME.COM Enter password for principal
"sysadm/admin@PETALSHOME.COM": Re-enter password for principal
"sysadm/admin@PETALSHOME.COM": Principal "sysadm/@PETALSHOME.COM"
created. kadmin.local: addprinc root/admin@PETALSHOME.COM Enter
password for principal "root/admin@PETALSHOME.COM": Re-enter password
for principal "root/admin@PETALSHOME.COM": Principal
"root/@PETALSHOME.COM" created.
-------------------------------------------------------- kadmin.local:
ktadd -k /usr/local/var/krb5kdc/kadm5.keytab kadmin/admin
kadmin/changepw Entry for principal kadmin/admin with kvno 3,
encryption type DES-CBC-CRC added to keytab
WRFILE:/usr/local/var/krb5kdc/kadm5.keytab. Entry for principal
kadmin/changepw with kvno 3, encryption type DES-CBC-CRC added to
keytab WRFILE:/usr/local/var/krb5kdc/kadm5.keytab.
-------------------------------------------- /usr/local/sbin/krb5kdc
/usr/local/sbin/kadmind cat /var/adm/k*.log Feb 03 09:56:34 pandora
kadmind[28743](info): starting Feb 03 09:56:34 pandora
krb5kdc[28741](info): commencing operation
--------------------------------------------
pandora:/usr/local/var/krb5kdc# /usr/local/sbin/kadmin Enter password:
kadmin: addprinc -randkey host/kmaster.petalshome.com
Principal "host/kmaster.petalshome.com@PETALSHOME.COM" created.
kadmin: addprinc -randkey host/kslave1.petalshome.com Principal
"host/kslave1.petalshome.com@PETALSHOME.COM" created. kadmin:
addprinc -randkey host/kslave2.petalshome.com Principal
"host/kslave2.petalshome.com@PETALSHOME.COM" created.
kadmin: ktadd host/kmaster.petalshome.com
Entry for principal host/kmaster.petalshome.com with kvno 3,
encryption type DES-CBC-CRC added to keytab WRFILE:/etc/krb5.keytab.
kadmin: q -------------------------------------------- ---user 'root'
on kslave2 CNAME wormhole------------- kadmin: ktadd
host/kslave2.petalshome.com Entry for principal
host/kslave2.petalshome.com with kvno 3, encryption type DES-CBC-CRC
added to keytab WRFILE:/etc/krb5.keytab. kadmin: q
-------------------------------------------- ---------added to each
inetd.conf----------- krb5_prop stream tcp nowait root
/usr/local/sbin/kpropd kpropd eklogin stream tcp nowait root
/usr/local/sbin/klogind klogind -k -c -e
kill -HUP (pid of inetd all kdc's)
--------------------------------------------
---user 'root' on kmaster CNAME pandora--------------
/usr/local/sbin/kdb5_util dump /usr/local/var/krb5kdc/slave_datatrans
/usr/local/sbin/kprop -f /usr/local/var/krb5kdc/slave_datatrans
kslave2.petalshome.com /usr/local/sbin/kprop: Client not found in
Kerberos database while getting initial ticket
-------------------------------------------- -----just for
information------ kadmin: getprincs K/M@PETALSHOME.COM
sysadm/admin@PETALSHOME.COM krbtgt/PETALSHOME.COM@PETALSHOME.COM
root/admin@PETALSHOME.COM kadmin/admin@PETALSHOME.COM
host/kslave2.petalhome.com@PETALSHOME.COM
kadmin/changepw@PETALSHOME.COM
host/kmaster.petalshome.com@PETALSHOME.COM
host/kslave1.petalshome.com@PETALSHOME.COM
host/kslave2.petalshome.com@PETALSHOME.COM
kadmin/history@PETALSHOME.COM
------------------------------------------
Thanks for any help
Michael
----------------------------------------------------
See Petals' new web page at http://www.girlswear.com
for Pretty little girls wearing
distinctive clothing and accessories
