creating the database
Dan Million
EllEyeOh at ornl.gov
Fri Jan 14 15:41:49 EST 2005
I've used Kerberos for a long time, but this is the first time I've
tried to create a KDC database from scratch using the instructions in
the Kerberos V5 Installation Guide.
I did a fairly vanilla build of r1.3.6 on AIX and installed it. From
section 4.1.1.4, "Create the Database":
# kdb5_util create -r MYREALM.ORNL.GOV -s
Program lacks support for key type while setting up enctype 0
Loading random data
Initializing database '/var/krb5/krb5kdc/principal' for realm
'MYREALM.ORNL.GOV',
master key name 'K/M at MYREALM.ORNL.GOV'
You will be prompted for the database Master Password.
It is important that you NOT FORGET this password.
Enter KDC database master key:
Re-enter KDC database master key to verify:
create: Bad encryption type while transforming master key from password
It creates nothing. Seems like this ought to be a simple step. Any
thoughts on what I'm doing wrong? Below are my kdc.conf and krb5.conf.
kdc.conf:
[kdcdefaults]
kdc_ports = 88
[realms]
MYREALM.ORNL.GOV = {
acl_file = /var/krb5/krb5kdc/kadm5.acl
admin_keytab = /var/krb5/krb5kdc/kadm5.keytab
database_name = /var/krb5/krb5kdc/principal
kadmind_port = 749
kpasswd_port = 464
key_stash_file = /var/krb5/krb5kdc/.k5.MYREALM.ORNL.GOV
master_key_name = K/M
master_key_type = des3_cbc_sha1
max_life = 7d 0h 0m 0s
max_renewable_life = 7d 0h 0m 0s
supported_enctypes = des3-hmac-sha1:normal des-cbc-crc:normal
kdc_supported_enctypes = des3-hmac-sha1:normal
des-cbc-crc:normal
}
krb5.conf:
[libdefaults]
default_realm = MYREALM.ORNL.GOV
default_keytab_name = /krb5/v5srvtab
ticket_lifetime = 2592000s
renew_lifetime = 2592000s
[realms]
MYREALM.ORNL.GOV = {
kdc = myhost.ornl.gov:88
admin_server = myhost.ornl.gov:749
}
[logging]
kdc = FILE:/var/krb5/log/krb5kdc.log
admin_server = FILE:/var/krb5/log/kadmin.log
default = FILE:/var/krb5/log/krb5lib.log
More information about the Kerberos
mailing list