nfs/kerberos problems

Chantal Rosmuller chantal at antenna.nl
Wed Aug 19 13:22:51 EDT 2009



On Tuesday 18 August 2009 19:21:23 Steve Glasser wrote:
> > added principal for client ubuntuhardy2
> >
> >  addprinc -randkey host/ubuntuhardy2.localhost.network addprinc -randkey
> > nfs/ubuntuhardy2.localhost.network
> > client
> >
> > logged in on the client:
> >
> >  kinit admin/admin
> >  Password for admin/admin at LOCALHOST.NETWORK: r
> >
> > add principal for client
> >
> >  kadmin: addprinc -randkey nfs/ubuntuhardy2.localhost.network
>
> It appears you created the host/ubuntuhardy2.localhost.network
> principal but did not extract the host key to the local keytab file on
> ubuntuhardy2, as you did with /ubuntuhardy1.  I believe that is
> required; if I'm wrong someone please correct me.
>
> Cheers

Hi Steve, I tried but it doesn't help, here are my keytabs:


root at ubuntuhardy2:~#  klist -e -k /etc/krb5.keytab
Keytab name: FILE:/etc/krb5.keytab
KVNO Principal
---- 
--------------------------------------------------------------------------
   3 nfs/ubuntuhardy2.localhost.network at LOCALHOST.NETWORK (Triple DES cbc mode 
with HMAC/sha1) 
   3 nfs/ubuntuhardy2.localhost.network at LOCALHOST.NETWORK (DES cbc mode with 
CRC-32) 
   4 host/ubuntuhardy2.localhost.network at LOCALHOST.NETWORK (Triple DES cbc 
mode with HMAC/sha1) 
   4 host/ubuntuhardy2.localhost.network at LOCALHOST.NETWORK (DES cbc mode with 
CRC-32) 


root at ubuntuhardy1:~#  klist -e -k /etc/krb5.keytab
Keytab name: FILE:/etc/krb5.keytab
KVNO Principal
---- 
--------------------------------------------------------------------------
   3 host/ubuntuhardy1.localhost.network at LOCALHOST.NETWORK (Triple DES cbc 
mode with HMAC/sha1) 
   3 host/ubuntuhardy1.localhost.network at LOCALHOST.NETWORK (DES cbc mode with 
CRC-32) 
   3 nfs/ubuntuhardy1.localhost.network at LOCALHOST.NETWORK (Triple DES cbc mode 
with HMAC/sha1) 
   3 nfs/ubuntuhardy1.localhost.network at LOCALHOST.NETWORK (DES cbc mode with 
CRC-32) 
   4 nfs/ubuntuhardy2.localhost.network at LOCALHOST.NETWORK (Triple DES cbc mode 
with HMAC/sha1) 
   4 nfs/ubuntuhardy2.localhost.network at LOCALHOST.NETWORK (DES cbc mode with 
CRC-32) 
   3 host/ubuntuhardy2.localhost.network at LOCALHOST.NETWORK (Triple DES cbc 
mode with HMAC/sha1) 
   3 host/ubuntuhardy2.localhost.network at LOCALHOST.NETWORK (DES cbc mode with 
CRC-32) 





More information about the Kerberos mailing list