kadmin: Cannot contact any KDC for requested realm whileinitializing kadmin interface

Jeremy Hunt jeremyh at optimation.com.au
Wed Nov 9 17:35:58 EST 2005


Including the following entry in the libdefaults section of krb5.conf
     dns_lookup_kdc = false
will probably work.
and if you don't want dns for the realm either, then add the following 
entry as well:
     dns_lookup_realm = false

See /krb5/man/man5/krb5.conf.5 for details.

david.turing wrote:
> [safeTgram (optim1) receive status: NOT encrypted, NOT signed.]
>
>
> When kinit is run, it will find KDC for TGT .
> Cannot contact any KDC for requested means that it can not find the KDC, 
> probably the DNS can resolve the KDC host name. 
> Solution is also very simple, in your krb.conf,  type your kdc's ip instead of the
> KDC 's host name.  hope this would help :)
>
>
> ----- Original Message ----- 
> From: "Kevin Coffman" <kwc at citi.umich.edu>
> To: "yi zeng" <bigwhite at gmail.com>
> Cc: <kerberos at mit.edu>
> Sent: Wednesday, October 26, 2005 10:07 PM
> Subject: Re: kadmin: Cannot contact any KDC for requested realm while initializing kadmin interface
>
>
>   
>> I would suspect a simple error in the configuration of your local
>> realm in /etc/krb5.conf, or a DNS issue.
>>
>> Can you post your /etc/krb5.conf ?
>>
>> On 10/26/05, yi zeng <bigwhite at gmail.com> wrote:
>>     
>>> Hi, there,
>>>  I set up a MIT Kerberos 5 master kdc on a pc in a private domain. I have
>>> /etc/hosts mapping hostname of the pc to its ip address and /etc/krb5.conf
>>> pointing kdc to the host name, which i believe correctly set.
>>>  The problem is that, I can do kadmin.local but I just couldn't do kadmin.
>>> It always complains:
>>> kadmin: Cannot contact any KDC for requested realm while initializing kadmin
>>> interface
>>>  kinit with no parameters reports the similar error:
>>> kinit(v5): Cannot contact any KDC for requested realm while getting initial
>>> credentials
>>>  but kinit works if I supply a principal from another realm (that realm and
>>> its kdc is also set in /krb5.conf).
>>>  I am confused that why kinit and kadmin just couldn't work in local realm?
>>> Is this a feature or I missed any setting issues?
>>>  Thank you very much.
>>>  yizeng
>>>       
>> ________________________________________________
>> Kerberos mailing list           Kerberos at mit.edu
>> https://mailman.mit.edu/mailman/listinfo/kerberos
>>
>>     
>
> ________________________________________________
> Kerberos mailing list           Kerberos at mit.edu
> https://mailman.mit.edu/mailman/listinfo/kerberos
>
>
>
>   



More information about the Kerberos mailing list