[33178] in Kerberos

home help back first fref pref prev next nref lref last post

Re: missing parameters in krb5-conf

daemon@ATHENA.MIT.EDU (Brian Candler)
Fri Feb 4 14:17:23 2011

Date: Fri, 4 Feb 2011 19:17:07 +0000
From: Brian Candler <B.Candler@pobox.com>
To: ankur <ajb98.itbhu@gmail.com>
Message-ID: <20110204191707.GB2798@talktalkplc.com>
MIME-Version: 1.0
Content-Disposition: inline
In-Reply-To: <c4c2d63d-95bb-4d4f-9c9b-05520e4074c0@k14g2000pre.googlegroups.com>
Cc: kerberos@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu

On Mon, Jan 31, 2011 at 03:51:00AM -0800, ankur wrote:
> hello,
> I am very new to kerberos authentication.
> 
> I have installed the krb5-user utility. i am getting the tickets from
> the server. But when i start the kdamin utility it says missing
> parameters in krb5-conf.

Yep, kadmin needs to be configured explicitly (in krb5.conf) with the
location of the master KDC. e.g.

        EXAMPLE.COM = {
            kdc = kdc1.example.com
            kdc = kdc2.example.com
            admin_server = kdc1.example.com
        }

At some point in the future it may be able to pick this up from DNS SRV
records instead, or be able to specify it on the kadmin command line - but
neither of those options works today.
________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

home help back first fref pref prev next nref lref last post