[1480] in Kerberos_V5_Development
Re: kadmind lossage
daemon@ATHENA.MIT.EDU (Barry Jaspan)
Fri Aug 2 11:35:47 1996
Date: Fri, 2 Aug 1996 11:35:43 -0400
From: "Barry Jaspan" <bjaspan@MIT.EDU>
To: tlyu@MIT.EDU
Cc: krbcore@MIT.EDU
In-Reply-To: <199608020326.XAA14752@dragons-lair.MIT.EDU> (message from Tom Yu on Thu, 1 Aug 1996 23:26:24 -0400)
Date: Thu, 1 Aug 1996 23:26:24 -0400
From: Tom Yu <tlyu@MIT.EDU>
Also, kadmind seems to spew the following to stderr upon startup,
causing dejagnu tests to break under Ultrix:
GSS-API authentication error acquiring credentials: Miscellaneous failure
GSS-API authentication error acquiring credentials: No principal in keytab matches desired name
That is a debugging message printed by the RPC AUTH_GSSAPI layer.
kadmind first tries to acquire credentials for kadmin and ovsec_adm
principals and, if that fails, it tries only to acquire credentials
for kadmin principals; this way it can accept ovsec_adm requests if
the keys are present in the keytab. In rpc/svc_auth_gssapi.c,
_svcauth_gssapi_set_names displayes that error message only if a
global debugging integer is non-zero, which it shouldn't be.
If you can't figure out what is causing the message to be printed,
I'll log into that Ultrix box and figure it out.
Barry
