mit kerberosv5 1.2.7 - kadmin wont connect - please help

[Matthew Mauzy]

Yes sorry, those are LDAP objectClasses.  Prior to having the shadowAccount 
objectClass in my account I was getting the same "Secure RPC required" 
error that you mentioned.  Where are you getting account info from? Local 
account? NIS?

--Matthew

--On Wednesday, April 02, 2003 10:55 PM -0500 Yan 
<ymercier at mxtest.homedns.org> wrote:

> Are you talking about LDAP ?
> It looks like it, I would really like to plug my MIT Kerberos KDC into
> LDAP but it doesnt seem to support it so far. because I didnt
> see the option when configuring it.
>
> Here is the output of the principal Im am using for test :
>
> kadmin:  getprinc yan/admin
> Principal: yan/admin at NEOTOKYO.COM
> Expiration date: [never]
> Last password change: Fri Mar 28 22:42:23 CST 2003
> Password expiration date: [none]
> Maximum ticket life: 0 days 10:00:00
> Maximum renewable life: 7 days 00:00:00
> Last modified: Fri Mar 28 22:42:23 CST 2003 (root/admin at NEOTOKYO.COM)
> Last successful authentication: [never]
> Last failed authentication: [never]
> Failed password attempts: 0
> Number of keys: 3
> Key: vno 1, Triple DES cbc mode with HMAC/sha1, no salt
> Key: vno 1, DES cbc mode with CRC-32, no salt
> Key: vno 1, DES cbc mode with CRC-32, Version 4
> Attributes:
> Policy: [none]
>
> How can I see these objectClass properties ?
>
> Yan
> ---------------------------------
> ----- Original Message -----
> From: "Matthew Mauzy" <matthew_mauzy at unc.edu>
> To: "Yan" <ymercier at mxtest.homedns.org>; <kerberos at mit.edu>
> Sent: Wednesday, April 02, 2003 10:37 PM
> Subject: Re: mit kerberosv5 1.2.7 - kadmin wont connect - please help
>
>
>> What objectClasses do you have defined for the user accounts?  Make sure
>> that you have shadowAccount in there.  Here's what I have:
>>
>> objectClass=person
>> objectClass=organizationalPerson
>> objectClass=inetOrgPerson
>> objectClass=posixAccount
>> objectClass=shadowAccount
>> objectClass=top
>> objectClass=krb5Principal
>>
>> --Matthew
>> __________________________________________________________________
>>                         Matthew W. Mauzy
>>                       Systems Administrator
>>                       Applied Math @ UNC-CH
>> email : mauzy at amath.unc.edu           pager : mpager at amath.unc.edu
>>  (W) 919.962.9819   www.amath.unc.edu/~mauzy/   (P) 919.347.0390
>> __________________________________________________________________
>>
>>
>> --On Wednesday, April 02, 2003 10:09 PM -0500 Yan
>> <ymercier at mxtest.homedns.org> wrote:
>>
>> > I tried to authenticate my solaris8 box with the bundled
>> > PAM_Kerb5 module, and it doesnt work because
>> > Sun SEAM Kdc is working with a SecureRPC method
>> > different than the one MIT Kerberos use.
>> >
>> > Is there a way to authenticate my solaris clients
>> > with the MIT kerberos KDC ?
>> >
>> > Thank you,
>> > Yan
>> > --------------
>> >
>>


__________________________________________________________________
                        Matthew W. Mauzy
                      Systems Administrator
                      Applied Math @ UNC-CH
email : mauzy at amath.unc.edu           pager : mpager at amath.unc.edu
 (W) 919.962.9819   www.amath.unc.edu/~mauzy/   (P) 919.347.0390
__________________________________________________________________