kadmin problem

Vipin Rathor v.rathor at gmail.com
Wed Dec 27 06:17:44 EST 2006


hi Scotty,
First things first...
>>After i erased the principal.db and created it from the beginning and
followed some steps..
I hope ur "some steps" includes configuring the KDC and the client.
Here is the step by step procedure for ur ready reckoner:


1. Export binary path in PATH env. var. Do

            $export PATH=/usr/local/bin:/usr/local/sbin:$PATH



2. Create krb5.conf in */etc/*, with your realm & other settings.



3. Create kdc.conf in */usr/local/var/krb5kdc/*, with your KDC settings.

*NOTE*: log files are in */usr/local/var/krb5kdc/*, by default.



4. Create a kerberos database and *stash file (optional)*,

            $kdb5_util create -r REALM -s



5. Add Administrators to the Acl File, in */usr/local/var/krb5kdc/kadm5.acl*



6. Add Administrators to the Kerberos Database,

            $kadmin.local

            ->addprinc admin/admin



7. Create a kadmind Keytab (*optional*). .

            $kadmin.local

            ->ktadd -k /usr/local/var/krb5kdc/kadm5.keytab kadmin/admin
kadmin/changepw

8. Start the Kerberos Daemons.

            $kadmind

            $krb5kdc

(Check log files for daemon starting info)

9. Now get the credential.

            $kinit admin/admin

10.       $klist

11.       $kadmin





I hope this should work....



Regards,

Vipin Rathor



More information about the Kerberos mailing list