kprop: Software caused connection abort while authenticating to server

Greg Hudson ghudson at MIT.EDU
Mon Sep 13 19:33:28 EDT 2010


On Fri, 2010-09-10 at 19:41 -0400, Mark.Hendricks at humboldt.edu wrote:
> /usr/kerberos/sbin/kprop: Software caused connection abort while authenticating to server 

This error message corresponds to the code ECONNRESET.  Such an error
can originate from a socket call, or from the krb5 library if the
connection is closed at an unexpected point in the krb5_sendauth
conversation.

A packet trace from the master's perspective could be enlightening.
Stepping through the kprop code could yield the same information, but
might not be as easy to carry out.

> Sep 10 16:28:18 [FQDN of SLAVE] krb5kdc[10815](info): AS_REQ (6 etypes {1 11 10 15 12 13}) 137.150.145.188: ISSUE: authtime 1284161298, etypes {rep=1 tkt=1 ses=1}, host/[FQDN of SLAVE]@REALM for host/[FQDN of SLAVE]@REALM 
> 
> Sep 10 14:36:30 [FQDN of MASTER-KDC] krb5kdc[10815](info): AS_REQ (6 etypes {1 11 10 15 12 13}) 137.150.145.188: ISSUE: authtime 1284154590, etypes {rep=1 tkt=1 ses=1}, host/[FQDN of MASTER-KDC]@REALM for host/[FQDN of MASTER-KDC]@REALM 

These messages pertain to acquiring tickets, but don't say anything
about the AP-REQ/AP-REP exchange between the master and slave.





More information about the Kerberos mailing list