[15553] in Athena Bugs

home help back first fref pref prev next nref lref last post

Broken shared key for IFS.UMICH.EDU?

daemon@ATHENA.MIT.EDU (John Hawkinson)
Sat Oct 4 18:40:39 1997

Date: Sat, 4 Oct 1997 18:40:35 -0400
To: network@MIT.EDU
Cc: bugs@MIT.EDU
From: John Hawkinson <jhawk@MIT.EDU>

[bill-the-cat!jhawk] ~> kvno 'krbtgt.IFS\.UMICH\.EDU'
The version number of key krbtgt.IFS.UMICH.EDU@ATHENA.MIT.EDU is 1.
[bill-the-cat!jhawk] ~> kvno 'krbtgt.ATHENA\.MIT\.EDU'@IFS.UMICH.EDU
kvno: Error making authenticator: Can't find ticket (krb_get_cred)
[bill-the-cat!jhawk] ~> 

This seems to work fine for other realms:

[bill-the-cat!jhawk] ~> kvno 'krbtgt.CS\.CMU\.EDU'
The version number of key krbtgt.CS.CMU.EDU@ATHENA.MIT.EDU is 1.
[bill-the-cat!jhawk] ~> kvno 'krbtgt.ATHENA\.MIT\.EDU'@CS.CMU.EDU
The version number of key krbtgt.ATHENA.MIT.EDU@CS.CMU.EDU is 1.
[bill-the-cat!jhawk] ~> 

The release thinks that IFS.UMICH.EDU is served by kerberos.ifs.umich.edu.
/afs/umich.edu/group/itd/etc/krb.conf suggests server1.ifs.umich.edu
instead. Using that instead doesn't help:

> kvno 'krbtgt.ATHENA\.MIT\.EDU'@IFS.UMICH.EDU
kvno: Error making authenticator: Permission Denied (kerberos)

Thanks.

--jhawk

home help back first fref pref prev next nref lref last post