[33570] in Kerberos

home help back first fref pref prev next nref lref last post

what is magical about kadmin.local?

daemon@ATHENA.MIT.EDU (Chris Hecker)
Sat Jul 9 06:47:14 2011

Message-ID: <4E1831A8.6050507@d6.com>
Date: Sat, 09 Jul 2011 03:47:04 -0700
From: Chris Hecker <checker@d6.com>
MIME-Version: 1.0
To: "kerberos@mit.edu" <kerberos@mit.edu>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu


I am trying to reproduce the "don't need to enter a password" behavior 
of kadmin.local and I can't seem to get it to work.  If I just run 
kadmin.local with no parameters, it eventually calls 
kadm5_init_with_password with a default root/admin@FOO.COM principal, 
null password and service name, and the default initialized params 
structure with just the realm in it.

I have almost 100% copied kadmin.c into a separate program, and I call 
kadm5_init_with_password with the exact same parameters, but my version 
fails and kadmin.local's doesn't (mine fails because root/admin isn't a 
valid krb account, but if I enter a valid admin princ it prompts for a 
password, and kadmin.local doesn't prompt or error on a valid or invalid 
principal).  I must be missing something stupid, but I can't figure out 
what it is, the calls seem identical.

Anybody have any ideas?

Thanks,
Chris

________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

home help back first fref pref prev next nref lref last post