Error while rrunning GSSAPI samples using SEAM (No principal in keytab matches desired name )

Vikas Gandhi vgandhi at quark.co.in
Thu Dec 11 23:28:13 EST 2003


Hi All
 I am using SEAM and ADSI 2000. I have done cross relam and cross
domain setup. The setup is fine. I am facing difficulties in running
gssapi samples using ADSI (though the reverse I have done it i.e.
using sspi samples using SEAM).
The gssapi samples work fine for SEAM. But I do not know where I am
mistaken when I try for ADSI-2000.
WIN-OS: 2003 server
WIN-DOMAIN: QDMS.CO.IN
WIN-relam: QDMS.CO.IN
win-host-name: beetle.qdms.co.in

SUN-OS: solaris 9
SEAM-DOMAIN: QUARK.CO.IN
win-host-name: blade.quark.co.in
seam-relam: QUARK.CO.IN
seam version: 1.01
As I have created a trust between the two domains and added kdc to the
windows and created mappings, I can login to the windows easily using
SEAM KDC.

Step 1:  I created a user windms in ADSI and gave windms and password
windms.
Step 2: ktpass –princ windms/beetle.qdms.co.in –mapuser windms -pass
windms -out blade.keytab
Step 3: I ftp that file in sun server and used ktutil to input in
/etc/krb5/krb5.keytab
Step 4: kinit -k -t /etc/krb5/krb5.keytab
windms/beetle.qdms.co.in at QDMS.CO.IN
works fins and I get the ticket.
Step 5: ./gss-server -port 4444 -verbose windms/beetle.qdms.co.in
GSS-API error acquiring credentials: Unspecified GSS failure.  Minor
code may provide more information
GSS-API error acquiring credentials: No principal in keytab matches
desired name

I do not know where the error lies. 
My /etc/hosts file says the following
X.X.X.X    blade.qdms.co.in blade.quark.co.in blade
X.X.X.X    beetle  beetle.qdms.co.in beetle.quark.co.in

My /etc/resolv.conf says
domain  quark.co.in
nameserver      X.X.X.X
nameserver      X.X.X.X
search quark.co.in qdms.co.in



Regards
Vikas


More information about the Kerberos mailing list