KRB5 & Sun Solaris 9

[Will Fiveash]

On Fri, Apr 24, 2009 at 02:50:47PM -0500, McGranahan, Jamen wrote:
> Error: 
> lib240:/usr/local/krb5-1.6.3/bin#kinit mcgranj at DS.VANDERBILT.EDU
> Kerberos initialization on lib240
> kinit: Can't send request (send_to_kdc) for principal
> mcgranj at DS.VANDERBILT.EDU

Can you ping the kdc below?

kdc = 129.59.1.26

> Krb5.conf:
> [logging]
>  default = FILE:/var/log/krb5libs.log
>  kdc = FILE:/var/log/krb5kdc.log
>  admin_server = FILE:/var/log/kadmind.log
> 
> [libdefaults]
>  default_realm = DS.VANDERBILT.EDU
>  dns_lookup_realm = true
>  dns_lookup_kdc = true
>  ticket_lifetime = 24h
>  forwardable = yes
>  default_tgs_enctypes = DES-CBC-CRC DES-CBC-MD5 RC4-HMAC
>  default_tkt_enctypes = DES-CBC-CRC DES-CBC-MD5 RC4-HMAC
>  preferred_enctypes = DES-CBC-CRC DES-CBC-MD5 RC4-HMAC

It may not make a difference but I've always seen the enctypes as all
lower case strings.

>  udp_preference_limit = 1
> 
> [realms]
>  DS.VANDERBILT.EDU = {
>   kdc = 129.59.1.26
>   admin_server = ds.vanderbilt.edu
>   default_domain = vanderbilt.edu
>  }
>  VANDERBILT.EDU = {
>   kdc = ds.vanderbilt.edu
>   admin_server = ds.vanderbilt.edu
>   default_domain = vanderbilt.edu
>  }
> 
> [domain_realm]
> .vanderbilt.edu = DS.VANDERBILT.EDU
> vanderbilt.edu = DS.VANDERBILT.EDU
> 

-- 
Will Fiveash
Sun Microsystems Inc.
http://opensolaris.org/os/project/kerberos/