~~Error when trying to ssh and acess kadmin interface~~

Richard E. Silverman res at qoxp.net
Wed Mar 15 16:29:27 EST 2006


> Hi,
> 1)    When trying to access the kadmin interface i get the following
> error:
> 
> kadmin: GSS-API (or Kerberos) error while initializing kadmin interface
> 
> Can anyone guide me on the same.

Make sure that the requisite kadmin principals (kadmin/admin, etc.) are in
the KDB and in the kadm5.keytab.

> 2)   When trying to ssh to the system using the kerberos 5 ticket, i get
> the following error:
> 
> #ssh -vvv system1
> 
> 
> debug1: Authentications that can continue: publickey,gssapi-with-
> mic,password,keyboard-interactive
> debug3: start over, passed a different list publickey,gssapi-with-
> mic,password,keyboard-interactive
> debug3: preferred gssapi-with-mic,publickey,keyboard-
> interactive,password
> debug3: authmethod_lookup gssapi-with-mic
> debug3: remaining preferred: publickey,keyboard-interactive,password
> debug3: authmethod_is_enabled gssapi-with-mic
> debug1: Next authentication method: gssapi-with-mic
> debug2: we sent a gssapi-with-mic packet, wait for reply
> debug1: Miscellaneous failure
> Server not found in Kerberos database

Check the KDC log and find out what principal this client is looking up.
Perhaps the canonical hostname does not match the principal name you are
creating.

- Richard



More information about the Kerberos mailing list