kadmin
James Walthall
jwaltha at us.ibm.com
Tue Feb 10 10:56:50 EST 2004
Hi,
I have installed Kerberos 5 on a red hat linux 8 machine (it comes
as a package install)... I have followed the directions thus far until the
following section:
http://web.mit.edu/kerberos/krb5-1.3/krb5-1.3.1/doc/krb5-install.html#Create%20Host%20Keys%20for%20the%20Slave%20KDCs
The problem that I am now running into is the fact that I cannot seem to
find the kadmin utility. I have available in the sbin directory the
kadmin.local utility, but not the kadmin utility itself. The instructions
say to type "/usr/local/sbin/kadmin" but obviously
that does not work.
Anyone have a similar problem? Any suggestions?
Regards,
James Walthall Jr
IBM - Host Integration Server Test IDD and BETA
Outside: (919) 254-8869
Tieline: 444-8869
Research Triangle Park
Raleigh, North CarolinaaFrom jwaltha at us.ibm.com Tue Feb 10 11:00:18 2004
Received: from pacific-carrier-annex.mit.edu (PACIFIC-CARRIER-ANNEX.MIT.EDU
[18.7.21.83])
by pch.mit.edu (8.12.8p2/8.12.8) with ESMTP id i1AG0Iqb002750
for <kerberos at PCH.mit.edu>; Tue, 10 Feb 2004 11:00:18 -0500 (EST)
Received: from e33.co.us.ibm.com (e33.co.us.ibm.com [32.97.110.131])
i1AG0Erk022604
for <kerberos at mit.edu>; Tue, 10 Feb 2004 11:00:14 -0500 (EST)
Received: from westrelay04.boulder.ibm.com (westrelay04.boulder.ibm.com
[9.17.193.32])
by e33.co.us.ibm.com (8.12.10/8.12.2) with ESMTP id i1AG0B0U737966
for <kerberos at mit.edu>; Tue, 10 Feb 2004 11:00:11 -0500
Received: from d03nm119.boulder.ibm.com (d03av02.boulder.ibm.com
[9.17.193.82])i1AG07Fd100994
for <kerberos at mit.edu>; Tue, 10 Feb 2004 09:00:08 -0700
To: kerberos at mit.edu
MIME-Version: 1.0
X-Mailer: Lotus Notes Release 6.0.2CF1 June 9, 2003
Message-ID: <OFB0AAF33E.C0F50371-ON87256E36.0057A2E5-85256E36.0057E544 at us.ibm.com>
From: James Walthall <jwaltha at us.ibm.com>
Date: Tue, 10 Feb 2004 11:01:43 -0500
X-MIMETrack: Serialize by Router on D03NM119/03/M/IBM(Release 6.0.2CF2|July
23, 2003) at 02/10/2004 09:00:07,
Serialize complete at 02/10/2004 09:00:07
X-Mailman-Approved-At: Tue, 10 Feb 2004 21:14:11 -0500
Content-Type: text/plain; charset="US-ASCII"
X-Content-Filtered-By: Mailman/MimeDel 2.1
Subject: Kerberos 5 slave installation
X-BeenThere: kerberos at mit.edu
X-Mailman-Version: 2.1
Precedence: list
List-Id: The Kerberos Authentication System Mailing List <kerberos.mit.edu>
List-Help: <mailto:kerberos-request at mit.edu?subject=help>
List-Post: <mailto:kerberos at mit.edu>
List-Subscribe: <https://mailman.mit.edu/mailman/listinfo/kerberos>,
<mailto:kerberos-request at mit.edu?subject=subscribe>
List-Archive: <http://mailman.mit.edu/pipermail/kerberos>
List-Unsubscribe: <https://mailman.mit.edu/mailman/listinfo/kerberos>,
<mailto:kerberos-request at mit.edu?subject=unsubscribe>
X-List-Received-Date: Tue, 10 Feb 2004 16:00:18 -0000
I have another problem regarding installation of the slave KDC:
by the time I get to this point in documentation:
http://web.mit.edu/kerberos/krb5-1.3/krb5-1.3.1/doc/krb5-install.html#Create%20Host%20Keys%20for%20the%20Slave%20KDCs
I have done nothing at all with my machine that will be used as a slave
kdc.
For some reason, I feel that something was supposed to be done with that
machine, but there were no explicit instructions informing me as to what
exactly was supposed to be done. Please tell me if I was supposed to setup
configurations, installations, or anything else before this point for the
slave KDC.
If I was, then what was I supposed to do?
If I was not, then what should i do?
Regards,
James Walthall Jr
IBM - Host Integration Server Test IDD and BETA
Outside: (919) 254-8869
Tieline: 444-8869
Research Triangle Park
Raleigh, North CarolinaaFrom mary at phase3networks.com Tue Feb 10 13:46:24 2004
Received: from pacific-carrier-annex.mit.edu (PACIFIC-CARRIER-ANNEX.MIT.EDU
[18.7.21.83])
by pch.mit.edu (8.12.8p2/8.12.8) with ESMTP id i1AIkOqb006545
for <kerberos at PCH.mit.edu>; Tue, 10 Feb 2004 13:46:24 -0500 (EST)
Received: from mwserver.phase3networks.com (wsip-68-98-223-2.ph.ph.cox.net
[68.98.223.2])i1AIkKt3016824
for <kerberos at mit.edu>; Tue, 10 Feb 2004 13:46:23 -0500 (EST)
Date: Tue, 10 Feb 2004 11:46:25 -0700
Message-ID: <2B5FAAE57FFFEA4087C1F39CD9B48ED702477A at mwserver.phase3networks.com>
MIME-Version: 1.0
X-MS-Has-Attach: yes
Content-Type: multipart/related;
type="multipart/alternative";
boundary="----_=_NextPart_001_01C3F006.2C3CC346"
X-MS-TNEF-Correlator:
Thread-Topic: KDC_ERR_BADOPTION
Content-class: urn:content-classes:message
Thread-Index: AcPwBi+2RZD8Gk2oRfGfP6UYgDMz2w==
X-MimeOLE: Produced By Microsoft Exchange V6.5.6944.0
From: "Mary" <mary at phase3networks.com>
To: <kerberos at mit.edu>
X-Mailman-Approved-At: Tue, 10 Feb 2004 21:14:11 -0500
X-Content-Filtered-By: Mailman/MimeDel 2.1
Subject: KDC_ERR_BADOPTION
X-BeenThere: kerberos at mit.edu
X-Mailman-Version: 2.1
Precedence: list
List-Id: The Kerberos Authentication System Mailing List <kerberos.mit.edu>
List-Help: <mailto:kerberos-request at mit.edu?subject=help>
List-Post: <mailto:kerberos at mit.edu>
List-Subscribe: <https://mailman.mit.edu/mailman/listinfo/kerberos>,
<mailto:kerberos-request at mit.edu?subject=subscribe>
List-Archive: <http://mailman.mit.edu/pipermail/kerberos>
List-Unsubscribe: <https://mailman.mit.edu/mailman/listinfo/kerberos>,
<mailto:kerberos-request at mit.edu?subject=unsubscribe>
X-List-Received-Date: Tue, 10 Feb 2004 18:46:25 -0000
This is a multi-part message in MIME format.
------_=_NextPart_001_01C3F006.2C3CC346
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
To MIT Kerberos Support,
Hope you can help with this problem I am having. I am running one =
Domain Controller with Windows 2003 Server and Exchange 2003 Server. =
Every 15 minutes in my Event Viewer I am receiving the error report =
noted below. The LSASS.exe is running at 99% CPU usage because of this. =
=20
=20
I checked my server for virues - it is clean. I added a registry key to =
force Kerberos to use TCP over UDP for Kerberos packets. I ran the =
ksetup.=20
=20
I have worked with Microsoft support on this and other than reloading =
the server's operating system they haven't anymore suggestions to help =
fix this problem. =20
=20
Any ideas what this might be? =20
=20
Thank you in advance for your time,
Mary Williams=20
=20
=20
=20
Event Type: Error
Event Source: Kerberos
Event Category: None
Event ID: 3
Date: 2/10/2004
Time: 12:27:59 AM
User: N/A
Computer: ServerName
Description:
A Kerberos Error Message was received:
on logon session=20
Client Time:=20
Server Time: 7:27:59.0000 2/10/2004 Z
Error Code: 0xd KDC_ERR_BADOPTION
Extended Error: 0xc00000bb KLIN(0)
Client Realm:=20
Client Name:=20
Server Realm: DomainName.COM
Server Name: host/ServerName.DomainName.com
Target Name: host/ServerName.DomainName.com at DomainName.COM
Error Text:=20
File: 9
Line: ab8
Error Data is in record data.
=20
For more information, see Help and Support Center at =
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 30 15 a1 03 02 01 03 a2 0.=A1....=A2
0008: 0e 04 0c bb 00 00 c0 00 ...=BB..=C0.
0010: 00 00 00 03 00 00 00 .......
=20
Phase 3 Networks LLC
Complete Computer Services for your business needs. =20
mary at phase3networks.com <mailto:mary at phase3networks.com> =20
www.phase3networks.com=20
480-705-4096=20
=20
------_=_NextPart_001_01C3F006.2C3CC346
Content-Type: image/gif;
name="image001.gif"
Content-Transfer-Encoding: base64
Content-ID: <image001.gif at 01C3EFCB.83552220>
Content-Description: image001.gif
Content-Location: image001.gif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------_=_NextPart_001_01C3F006.2C3CC346--
More information about the Kerberos
mailing list