Lots of UNKNOWN_SERVER this time... whoa

Jeffrey Altman jaltman at secure-endpoints.com
Tue Apr 24 15:18:08 EDT 2007


Russ Allbery wrote:
> Your PAM module seems to be probing for a default realm by trying various
> manipulations of your local hostname.  Usually this would indicate that
> your krb5.conf isn't setting a local realm.
>
Default realm or domain to realm mapping?
>> Apr 23 15:10:44 kdc.foo.com krb5kdc[12698](info): TGS_REQ (1 etypes {1}) 
>> 129.83.11.213: UNKNOWN_SERVER: authtime 1177355435,  jblaine at RCF.FOO.COM 
>> for afsx/rcf.foo.com at RCF.FOO.COM, Server not found in Kerberos database
>> Apr 23 15:10:44 kdc.foo.com krb5kdc[12698](info): TGS_REQ (1 etypes {2}) 
>> 129.83.11.213: UNKNOWN_SERVER: authtime 1177355435,  jblaine at RCF.FOO.COM 
>> for afsx/rcf.foo.com at RCF.FOO.COM, Server not found in Kerberos database
>> Apr 23 15:10:44 kdc.foo.com krb5kdc[12698](info): TGS_REQ (1 etypes {3}) 
>> 129.83.11.213: UNKNOWN_SERVER: authtime 1177355435,  jblaine at RCF.FOO.COM 
>> for afsx/rcf.foo.com at RCF.FOO.COM, Server not found in Kerberos database
>
> These are interesting.  I've not heard of afsx before.  What aklog are you
> using?
afsx is the service name that Doug Engert originally used in order to
avoid conflicts with IBM DFS.

Jeffrey Altman
Secure Endpoints Inc.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3355 bytes
Desc: S/MIME Cryptographic Signature
Url : http://mailman.mit.edu/pipermail/kerberos/attachments/20070424/c1033b07/attachment.bin


More information about the Kerberos mailing list