kadmin.local: Cannot find/read stored master key

Marcel Karras toka at freebits.de
Thu Jul 1 16:35:07 EDT 2004


Hello,

I've got problems setting up Krb5 on my Crux Linux host.
I did all nessessary things and always get stuck at the point trying to
create the keytab file with kadmin.local.
The program says:

Authenticating as principal root/admin at TESTSERVER.FREEBIS.DE with
password. 
kadmin.local: Cannot find/read stored master key while
initializing kadmin.local interface

Here is my /etc/krb5.conf:
-----------------------------------------------------------------------
[libdefaults]
        default_realm = TESTSERVER.FREEBIS.DE
        dns_lookup_realm = false
        dns_lookup_kdc = false

[realms]
        FREEBIS.DE = {
                kdc = 62.27.20.125:88
                admin_server = 62.27.20.125:750
                default_domain = localhost
        }


[domain_realm]
        .localhost = TESTSERVER.FREEBITS.DE
        localhost = TESTSERVER.FREEBITS.DE

[logging]
        default = FILE:/var/log/krb5libs.log
        kdc = FILE:/var/log/krb5kdc.log
        admin_server = FILE:/var/log/kadmind.log

[kdc]
        profile = /var/krb5kdc/kdc.conf
-----------------------------------------------------------------------

Here is my /var/krb5kdc/kdc.conf:
-----------------------------------------------------------------------
[kdcdefaults]
        kdc_ports = 750,88

[realms]
        TESTSERVER.FREEBITS.DE = {
                master_key_type = des-cbc-crc
		database_name = /var/krb5kdc/principal
                admin_keytab = FILE:/var/krb5kdc/kadm5.keytab
                acl_file = /var/krb5kdc/kadm5.acl
                key_stash_file = /var/krb5kdc/.k5.TESTSERVER.FREEBITS.DE
                kdc_ports = 750,88
                max_life = 10h 0m 0s
                max_renewable_life = 7d 0h 0m 0s
        }
-----------------------------------------------------------------------

Any help would be very appreciative.

Greetings from Germany
- Marcel Karras

--
Contact: toka at freebits.de
http://www.freebits.de
Unix, Linux && OpenSource


More information about the Kerberos mailing list