[20559] in Kerberos_V5_Development
Re: trouble with pkinit
daemon@ATHENA.MIT.EDU (Ken Hornstein via krbdev)
Fri Apr 17 18:22:04 2026
Message-Id: <202604172221.63HMLrN6021948@hedwig.cmf.nrl.navy.mil>
To: Geoffrey Thorpe <geoff@geoffthorpe.net>
cc: krbdev@mit.edu
In-Reply-To: <b6fbcc5a-f48a-4b34-b31c-dbdf27d93c94@geoffthorpe.net>
MIME-Version: 1.0
Date: Fri, 17 Apr 2026 18:21:53 -0400
From: Ken Hornstein via krbdev <krbdev@mit.edu>
Reply-To: Ken Hornstein <kenh@cmf.nrl.navy.mil>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krbdev-bounces@mit.edu
>Any ideas? If there's a way to increase the debugging (or even
>instrument the mit code directly), I'm happy to try out any suggestions.
Oh, I realized I should have answered this part as well:
- The KDC logs are helpful as well (but they would have told you the
exact same thing).
- If you set the KRB5_TRACE environment variable, a lot of debugging output
will be generated. You want that to be set to the name of an output
file; you can use /dev/stdout on most operating systems to get it
printed directly to the terminal. However, in this case it
would have also told you the same thing, just more verbosely. E.g.:
[21198] 1776464444.633823: Response was from primary KDC
[21198] 1776464444.633824: Received error from KDC: -1765328378/Client not found in Kerberos database
--Ken
_______________________________________________
krbdev mailing list krbdev@mit.edu
https://mailman.mit.edu/mailman/listinfo/krbdev
