[33490] in Kerberos

home help back first fref pref prev next nref lref last post

Re: Kadmin compatibility

daemon@ATHENA.MIT.EDU (Tim Mooney)
Fri Jun 17 17:25:17 2011

Date: Fri, 17 Jun 2011 16:23:35 -0500 (CDT)
From: Tim Mooney <mooney@dogbert.cc.ndsu.nodak.edu>
To: Derek Yarnell <derek@umiacs.umd.edu>, kerberos@mit.edu
In-Reply-To: <4DFBBFED.9050409@umiacs.umd.edu>
Message-ID: <alpine.SOC.2.01.1106171621460.10083@dogbert.cc.ndsu.NoDak.edu>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu

In regard to: Kadmin compatibility, Derek Yarnell said (at 4:58pm on Jun...:

> So currently we have a RHEL4 krb5-server-1.3.4-62.el4_8.2 kadmind
> running. The new RHEL6 krb5-workstation-1.9-9.el6 kadmin client can not
> connect to the kadmind server,
>
>> From the normal 'kadmin -p user/admin' command we get, GSS-API (or
> Kerberos) error while initializing kadmin interface.

This may not be related, but have you tried setting

 	allow_weak_crypto=1

in the libdefaults section of your /etc/krb5.conf on the RHEL6 client?

Tim
-- 
Tim Mooney                                  mooney@dogbert.cc.ndsu.NoDak.edu
Enterprise Computing & Infrastructure       701-231-1076 (Voice)
Room 242-J6, IACC Building                  701-231-8541 (Fax)
North Dakota State University, Fargo, ND 58105-5164
________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

home help back first fref pref prev next nref lref last post