KRB5 against Win2003

Rainer Budde budde at prodas.de
Wed Dec 22 11:53:45 EST 2004


Hi,

I want to use Kerberos on a SuSE 9.1 system to authentificate against a
Win2003 Server. I modified the configuration file like this:

-------------------------------
[libdefaults]
        default_realm = PRODAS.LOCAL
        clockskew = 300

[realms]
        PRODAS.LOCAL = {
#               kdc = PDS-AD.PRODAS.LOCAL
#               admin_server = MY.COMPUTER
#               kpasswd_server = MY.COMPUTER
        }
#       OTHER.REALM = {
#               kdc = OTHER.COMPUTER
#       }

[domain_realm]
        PDS-AD.PRODAS.LOCAL = PRODAS.LOCAL

[logging]
        default = SYSLOG:NOTICE:DAEMON
        kdc = FILE:/var/log/kdc.log
        kadmind = FILE:/var/log/kadmind.log

[appdefaults]
        pam = {
                ticket_lifetime = 1d
                renew_lifetime = 1d
                forwardable = true
                proxiable = false
                retain_after_close = false
                minimum_uid = 0
                debug = false
--------------------------------

If I use "kinit ADMINISTRATOR at PRODAS.LOCAL" i´ll get the following message:

----------------
kinit: krb5_get_init_creds: unable to reach any KDC in realm PRODAS.LOCAL
----------------

My domain is "prodas". The hostname is "pds-ad.prodas.local". Is
PRODAS.LOCAL the correct realm??? Does anybody know whats wrong??

Best regards

Rainer




More information about the Kerberos mailing list