[8071] in Kerberos
Re: 0 seconds initialization (round 2)
daemon@ATHENA.MIT.EDU (Barry Jaspan)
Fri Sep 20 12:44:28 1996
Date: Fri, 20 Sep 1996 12:23:20 -0400
From: "Barry Jaspan" <bjaspan@MIT.EDU>
To: soonam@list.gmu.edu (Soonam Kahng)
Cc: kerberos@MIT.EDU
In-Reply-To: [8067]
Date: 20 Sep 1996 08:24:59 GMT
From: soonam@list.gmu.edu (Soonam Kahng)
In addition, other problem is that when I run "kadmin", it asks password.
Even I change the password of "kadmin/admin" manually, the password
doesn't work. any idea ?
Following is log message at consol.
Sep 20 04:23:59 AS_REQ 129.174.144.20(88): ISSUE: authtime 843207839,
soonam/admin@LIST.GMU.EDU for kadmin/admin@LIST.GMU.EDU
kadmin is trying to acquire a ticket for the client soonam/admin and
the service kadmin/admin. Just like kinit, kadmin is asking you for
the *client's* password, not the service's. Kerberos never asks you
for the password of a service, because you generally don't know it.
Just to anticipate your next question: If you changed the password of
kadmin/admin manually, it is no longer in sync with the value in
kadmind's keytab. You have to use ktadd (via kadmin.local) again to
fix this; otherwise, kadmin will report an authentication error when
it tries to talk to kadmind.
Barry
