Problems with KDC
" Vladimir
" Vladimir
Thu Nov 27 05:33:01 EST 2003
Hello everyone!!!
On my OpenBSD 3.4 box I try to install my kerberosV kdc. My /etc/kerberosV/krb5.conf :
[libdefaults]
# Set the realm of this host here
default_realm = DOMAIN.RU
# Maximum allowed time difference between KDC and this host
clockskew = 300
# Uncomment this if you run NAT on the client side of kauth.
# This may be considered a security issue though.
# no-addresses = yes
[realms]
MY.REALM = {
# Specify KDC here
kdc = 192.168.1.75
}
# This sections describes how to figure out a realm given a DNS name
[kadmin]
# This is the trickiest part of a Kerberos installation. See the
# heimdal infopage for more information about encryption types.
# For a k5 only realm, this will be fine
default_keys = v5
[logging]
# The KDC logs by default, but it's nice to have a kadmind log as well.
kadmind = FILE:/var/heimdal/kadmind.log
I successfully setting up database with kstash and kadmin -l and added a new user ME .
But when I tryed to kiinit ME I see :
kinit: krb5_get_init_creds: unable to reach any KDC in realm DOMAIN.RU .
When I try to klist :
bash-2.05b# klist
klist: No ticket file: /tmp/krb5cc_0
My log files have no records about kerberos errors.
If i try :
bash-2.05b# kadmin -l
kadmin> dump
q at DOMAIN.RU 1:1:16:6941ebe8ff962bcd9e52e7e47581fdfa217aab633bd06109231a00d031ed135e40f243dd88d8ee083457f0eca6ac5be2e18b02eb:-:1:3:ae92b27256d8b46cf9079f9d08ec6a87d15550fa53d61ab3052b11bc91a52b505a72d832:-:1:2:83379b68e7853e1a57296111ddcf0e678b483b19ce3e867b7f4c2d02e24ff9e6833b24ce:-:1:1:892fd804e8f357e8bc089e45dde2788cdeb320a837c15502726ca4151a1ede75ee81b86e:- 20031127102224:kadmin/admin at DOMAIN.RU - - - - 86400 604800 126 20031127102224:64426:0
me at DOMAIN.RU 1:1:16:14e5d30726ac86be6a4e06c4d742214e94efd44f4d83d28bd471e65a404b5abb70a4e25b4dd3fcc31b361b93543be075b951302d:-:1:3:d522e2ece567b5652e9d261ca6a9f375b087a21859b0abf5ef4e2d504250a2f407a181a8:-:1:2:9cf4d3cac3647aef0066fca6e71c084a1fed5efe55795e6e380f4519a841eef9cad7d1b4:-:1:1:17a7dab802604a0083c7bac66da7bd522c2418456d2622d5be02405224099ac8b4e73e4c:- 20031127094221:kadmin/admin at DOMAIN.RU - - - - 86400 604800 126 20031127094221:337652:0
All kerbros processes are started :
root 32224 0.0 0.2 152 72 C0- S 1:12PM 0:00.04 /usr/libexec/kdc
root 10765 0.0 0.0 116 4 C0- I 1:12PM 0:00.03 /usr/libexec/kadmind
root 9367 0.0 0.0 108 4 C0- I 1:12PM 0:00.03 /usr/libexec/kpasswdd
I have no firewall on this machine and kerboros listen his ports :
tcp 0 0 192.168.1.75.88 *.* LISTEN
tcp 0 0 127.0.0.1.88 *.* LISTEN
udp 0 0 192.168.1.75.88 *.*
udp 0 0 127.0.0.1.88 *.*
Why I have errors?
With best regards,
Potapov Vladimir.
More information about the Kerberos
mailing list