Problem with kpasswd on Solaris

Perez, Ivette ivette_perez at merck.com
Fri Sep 9 11:09:58 EDT 2005


Hi,

I am new to Kerberos and I have been setting up a test environment to play.
I am having problems changing my principals' password using kpasswd from a
Solaris 8 client. After entering the principal's passwd I receive this
error: Cannot establish a session with the Kerberos administrative server
for realm XXXXXXXXXXX. Database Error! Required KADM5 principal missing.
However, if I run #kpasswd <principal> as root I am able to change the
password. I can also change the password from the Redhat clients so I figure
I am missing something on my Solaris client, maybe permissions???? I really
don't know where to look. Any help would be appreciated.

Additional Info:
KDC: Linux Suse running MIT Kerberos
Log entry when trying kpasswd as principal: Sep 09 10:36:24 kdcserver
krb5kdc[3913](info): AS_REQ (2 etypes {3 1}) CLIENT_IP_ADDRESS:
SERVER_NOT_FOUND: principal at MYREALM.COM for changepw/kdcserver at MYREALM.COM,
Server not found in Kerberos database

Log entry when trying #kpasswd <principal> as root: Sep 09 10:58:03
kdcserver krb5kdc[3913](info): AS_REQ (7 etypes {18 17 16 23 1 3 2})
CLIENT_IP_ADDRESS: ISSUE: authtime 1126277883, etypes {rep=16 tkt=16
ses=16}, principal at MYREALM.COM for kadmin/changepw at MYREALM.COM


Thanks

Ivette Perez
Systems Specialist
Infrastructure Technologies 
*   ivette_perez at merck.com




------------------------------------------------------------------------------
Notice:  This e-mail message, together with any attachments, contains information of Merck & Co., Inc. (One Merck Drive, Whitehouse Station, New Jersey, USA 08889), and/or its affiliates (which may be known outside the United States as Merck Frosst, Merck Sharp & Dohme or MSD and in Japan, as Banyu) that may be confidential, proprietary copyrighted and/or legally privileged. It is intended solely for the use of the individual or entity named on this message.  If you are not the intended recipient, and have received this message in error, please notify us immediately by reply e-mail and then delete it from your system.
------------------------------------------------------------------------------


More information about the Kerberos mailing list