kprop between master (mandriva) and slave (solaris)

Marcin N nichu at CUT.onet.pl
Tue Apr 29 11:47:44 EDT 2008


Marcin N wrote:
> Hello
> I'm trying to make krb database replication again (this time mandriva is 
> master and solaris is slave)
> 
> I patched kprop on master (mandriva) - by the way thank You for patch 
> one more time but while trying to execute kprop i get error message:
> 
> /usr/local/sbin/kprop -n kiprop at KRB.COM -f /home/nichu/dump.krb5 
> slave.krb.com
> 
> /usr/local/sbin/kprop: Cannot resolve network address for KDC in 
> requested realm while getting initial ticket
> 
> DNS is not an issue - because:
> host slave.krb.com
> slave.krb.com has address 192.168.0.50
> 
> in log there's nothing about that :/
> 
> file kdc.conf:
> 
> [kdcdefaults]
>         kdc_ports = 88,750
> 
> [realms]
>      KRB.COM = {
>                 profile = /etc/krb5.conf
>                 database_name = /usr/local/var/krb5kdc/principal
>                 admin_database_name = 
> /usr/local/var/krb5kdc/principal.kadm5
>                 admin_database_lockfile = 
> /usr/local/var/krb5kdc/principal.kadm.lock
>                 admin_keytab = FILE:/etc/kerberos/krb5kdc/kadm5.keytab
>                 acl_file = /etc/kerberos/krb5kdc/kadm5.acl
>                 key_stash_file = /etc/kerberos/krb5kdc/.k5stash
>                 kadmind_port = 749
>                 max_life = 8h 0m 0s
>                 max_renewable_life = 7d 0h 0m 0s
>                 default_principal_flags = +preauth
>         }
> 
> =============================
> 
> file /etc/krb.conf
> [libdefaults]
>         default_realm = KRB.COM
> 
> [realms]
>          KRB.COM = {
>                 admin_server = master.krb.com
>                 kdc = master.krb.com
>                 kdc = slave.krb.com
>                 master_kdc = master.krb.com
> 
>         }
> 
> [domain_realm]
>         .krb.com = KRB.COM
>         krb.com = KRB.COM
> 
> [logging]
>  default = FILE:/var/log/kerberos/krb5libs.log
>  kdc = FILE:/var/log/kerberos/krb5kdc.log
>  admin_server = FILE:/var/log/kerberos/kadmind.log
> 
> [kdc]
>  profile = /etc/kerberos/krb5kdc/kdc.conf
> ==============================
> 
> Principals of course exists:
> 
> kadmin.local:  listprincs
> K/M at KRB.COM
> host/slave.krb.com at KRB.COM
> host/master.krb.com at KRB.COM
> kadmin/admin at KRB.COM
> kadmin/changepw at KRB.COM
> kadmin/history at KRB.COM
> kadmin/master.krb.com at KRB.COM
> krbtgt/KRB.COM at KRB.COM
> nichu/admin at KRB.COM
> nichu at KRB.COM
> 
> 
> So what's wrong ? ? ?
> 
> Regards
> nichu

Hello again:
I added into /etc/hosts master.krb.com after 127.0.0.1 entry and now
error message is different (so it was a prlbem with name resolution...):

/usr/local/sbin/kprop: while setting client principal name

:/ but still it doesn't tell me to much :/

regards
nichu



More information about the Kerberos mailing list