kdc.conf Error missing parameters

Nathan Ward nward at esphion.com
Sun May 4 01:20:54 EDT 2003


> supported_enctypes = desc3-hmac-sha1:normal des-cbc-crc:normal

desc3 should be des3 here I think.

On Sat, 03 May 2003 23:59:54 -0500, Sloan <smileyq at nashlinux.com> wrote:

> I am trying to setup kerberos login for Mac OS X 10.2.4 client using a 
> kerberos server as a Solaris 8. When I try to start krb5kdc I get the 
> following error message when I have the kdc file located in 
> /usr/local/var/krb5kdc/kdc.conf.
>
> Error:
>
> krb5kdc: Stored master key is corrupted - while fetching master key K/M 
> for real
> m PAUL.NASHLINUX.COM
>
>
> When I remove the kdc.conf file it starts up just file and authenticates 
> everything fine. My problem is I can't run or star kadmind or run kadmin 
> to add host principles to keytabs etc.. Any ideas what could be causing 
> this?
>
> Below is my kdc.conf file:
>
> [kdcdefaults]
> kdc_ports = 88, 750
>
> [realms]
> PAUL.NASHLINUX.COM = {
> database_name = /usr/local/var/krb5kdc/principal
> admin_keytab = /usr/local/var/krb5kdc/kadm5.keytab
> acl_file = /usr/local/var/krb5kdc/kadm5.acl
> key_stack_file= /usr/local/var/krb5kdc/.k5.PAUL.NASHLINUX.COM
> kadmind_port = 749
> max_life = 10h 0m 0s
> max_renewable_life = 7d 0h 0m 0s
> master_key_type = des3-hmac-sha1
> supported_enctypes = desc3-hmac-sha1:normal des-cbc-crc:normal
>
> }
> ________________________________________________
> Kerberos mailing list           Kerberos at mit.edu
> https://mailman.mit.edu/mailman/listinfo/kerberos
>
>



-- 
Nathan Ward
Esphion Ltd.



More information about the Kerberos mailing list