[33489] in Kerberos
Kadmin compatibility
daemon@ATHENA.MIT.EDU (Derek Yarnell)
Fri Jun 17 17:17:42 2011
Message-ID: <4DFBBFED.9050409@umiacs.umd.edu>
Date: Fri, 17 Jun 2011 16:58:21 -0400
From: Derek Yarnell <derek@umiacs.umd.edu>
MIME-Version: 1.0
To: kerberos@mit.edu
Cc: derek@umiacs.umd.edu
Reply-To: derek@umiacs.umd.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
Hi,
So currently we have a RHEL4 krb5-server-1.3.4-62.el4_8.2 kadmind
running. The new RHEL6 krb5-workstation-1.9-9.el6 kadmin client can not
connect to the kadmind server,
>From the normal 'kadmin -p user/admin' command we get, GSS-API (or
Kerberos) error while initializing kadmin interface.
>From the perl-Authen-Krb5-Admin we get, Programmer error! Bad API
structure version.
The server sees the following,
kadmind[5009](Notice): Authentication attempt failed: x.x.x.x, GSS-API
error strings are:
kadmind[5009](Notice): Authentication attempt failed: x.x.x.x, GSS-API
error strings are:
kadmind[5009](Notice): Incorrect channel bindings were supplied
kadmind[5009](Notice): Incorrect channel bindings were supplied
kadmind[5009](Notice): No error
kadmind[5009](Notice): No error
kadmind[5009](Notice): GSS-API error strings complete.
kadmind[5009](Notice): GSS-API error strings complete.
Are we just out of luck and need to upgrade, we were planning on it?
Normal kinit/kpasswd operations work fine.
Thanks,
derek
--
---
Derek T. Yarnell
University of Maryland
Institute for Advanced Computer Studies
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
