"Unknown code 69" running Solaris 9 kadmin

[hooshang]

Sarah D wrote:
> 
> I'm just trying to get my Solaris 9 native KDC up and running and have
> run into a problem with kadmin. Both krb5kdc and kadmind are running
> correctly and I'm able to get a TGT from the KDC. However, when I try
> to run kadmin, I get the following message at the user interface:
> 
> kadmin: GSS-API (or Kerberos) error while initializing kadmin
> interface
> 
> Other postings here suggest that this is a fairly common and fairly
> generic error. In my syslog, I'm seeing these errors:
> 
> Oct  9 18:08:19 hostname kadmin[429]: [ID 824607 user.error] GSS-API
> error : rpc_gss_seccreate failed
> Oct  9 18:08:19 hostname kadmin[429]: [ID 824607 user.error] GSS-API
> error : The routine completed successfully
> Oct  9 18:08:19 hostname kadmin[429]: [ID 824607 user.error] GSS-API
> error : rpc_gss_seccreate failed
> Oct  9 18:08:19 hostname kadmin[429]: [ID 824607 user.error] GSS-API
> error : Unknown code 69
> 
> In the kdc.log file I'm seeing:
> 
> krb5kdc: Unknown code 2 - snk4 finding the enctype and key


Check time skew

Hooshang

> <me/admin/SNK4 at SOLARIS9.COM>
> Oct 09 18:08:17 hostname krb5kdc[277](info): AS_REQ 1.2.3.4(88):
> NEEDED_PREAUTH: me/admin at SOLARIS9.COM for
> kadmin/hostname.company.com at SOLARIS9.COM, Additional
> pre-authentication required
> Oct 09 18:08:19 hostname krb5kdc[277](info): AS_REQ 1.2.3.4(88):
> ISSUE: authtime 1034212099, me/admin at SOLARIS9.COM for
> kadmin/hostname.company.com at SOLARIS9.COM
> 
> Nothing seems to be written to the kadmin.log file (perhaps I don't
> have the configuration correct).
> 
> My kadmin/admin and kadmin/changepw principals exist in the database
> and have been extracted to the key table. The configuration files
> appear correct.
> 
> Anybody got any suggestions on what might be causing this?
> 
> Thanks!
> 
> Sarah
> ________________________________________________
> Kerberos mailing list           Kerberos at mit.edu
> http://mailman.mit.edu/mailman/listinfo/kerberos