kinit

[Kerry Thompson]

Andreas Hasenack writes:
 > Em Wed, Mar 13, 2002 at 04:44:50PM -0500, Josef Allen escreveu:
 > > Everytime I try to run kinit I get the following error:
 > > 
 > > kinit(v5): Client not found in Kerberos database while getting initial
 > > credentials
 > 
 > kinit will use your login name + default realm (as defined in /etc/krb5.conf),
 > unless you ask for a specific principal. Perhaps your login name in this
 > machine where you are running kinit doesn't match the principal's name you
 > want in the kerberos database.
 > 

It could also be that the client host doesn't have a
host/hostname at REALM principal setup in the KDC. Either its missing,
or the DNS mapping of the IP address doesn't match the principal
name. Checking the KDC logs should show this up.

.. and don't forget that this host principal need to be dumped to a key
file and installed on the client system as /etc/krb5.keytab.

Kerry

-- 
Kerry Thompson CISSP
kerry at crypt.gen.nz
http://www.crypt.gen.nz