KADMIN error

[Kim Sassaman]

Issuing the following command on my KDC I get the following output:

 

[root at hosthidden root]# kadmin

Authenticating as principal userhidden/admin at EXAMPLE.COM with password.

kadmin: Database error! Required KADM5 principal missing while initializing
kadmin interface

[root at hosthidden root]# kadmin.local

Authenticating as principal userhidden/admin at EXAMPLE.COM with password.

kadmin.local:  exit

[root at hosthidden root]#

 

Log output

 

Jan 11 20:38:01 hosthidden krb5kdc[1564](info): AS_REQ (3 etypes {16 3 1})
x.x.x.x(88): SERVER_NOT_FOUND: userhidden/admin at EXAMPLE.COM for
kadmin/admin at EXAMPLE.COM, Server not found in Kerberos database

 

Krb5.conf

 

[logging]

 default = FILE:/var/log/krb5libs.log

 kdc = FILE:/var/log/krb5kdc.log

 admin_server = FILE:/var/log/kadmind.log

 

[libdefaults]

 ticket_lifetime = 24000

 default_realm = EXAMPLE.COM

 dns_lookup_realm = true

 dns_lookup_kdc = true

 

[realms]

 EXAMPLE.COM = {

  kdc = hosthidden.example.com

  admin_server = hosthidden.example.com

  default_domain = example.com

 }

 

[domain_realm]

 .example.com = EXAMPLE.COM

 example.com = EXAMPLE.COM

 

[kdc]

 profile = /var/kerberos/krb5kdc/kdc.conf

 

[appdefaults]

 pam = {

   debug = false

   ticket_lifetime = 36000

   renew_lifetime = 36000

   forwardable = true

   krb4_convert = false

 }

 

Kdc.conf

 

[kdcdefaults]

 acl_file = /var/kerberos/krb5kdc/kadm5.acl

 dict_file = /usr/share/dict/words

 admin_keytab = /var/kerberos/krb5kdc/kadm5.keytab

kdc_ports = 88

 v4_mode = nopreauth

 

[realms]

EXAMPLE.COM = {

  master_key_type = des-cbc-crc

  supported_enctypes = des3-cbc-sha1:normal des3-cbc-sha1:norealm
des3-cbc-sha1:onlyrealm des-cbc-crc:v4 des-cbc-crc:afs3 des-cbc-crc:normal
des-cbc-crc:norealm des-cbc-crc:onlyrealm des-cbc-md4:v4 des-cbc-md4:afs3
des-cbc-md4:normal des-cbc-md4:norealm des-cbc-md4:onlyrealm des-cbc-md5:v4
des-cbc-md5:afs3 des-cbc-md5:normal des-cbc-md5:norealm
des-cbc-md5:onlyrealm des-cbc-sha1:v4 des-cbc-sha1:afs3 des-cbc-sha1:normal
des-cbc-sha1:norealm des-cbc-sha1:onlyrealm

 }

 

 

/etc/hosts/

 

# Do not remove the following line, or various programs

# that require network functionality will fail.

127.0.0.1               localhost.localdomain localhost

x.x.x.x          hosthidden.example.com

 

resolv.conf

domain example.com

search example.com phx-dc.example.com ncc.example.com

nameserver x.x.x.x

nameserver x.x.x.x

nameserver x.x.x.x

 

Please help.

 

Kim Sassaman

CISSP CCNP

"Research is what I am doing when I am not sure what I am doing" - Wernher
Von Braun