Logging in with kerberos fails, but acquiring a ticket with kinit does not

[Jean-Yves Avenard]

Hi

On 27 January 2011 09:38, Thomas Schweikle <tps at vr-web.de> wrote:

I don't see what your problem is here.
> Now local login:
> user at host:~$ su - user
> Password:
> su: Fehler bei Authentifizierung

you don't have a kerberos ticket here ; so what did you expect differently?

Also, does you /etc/pam.d contain an entry for SU ? is it configured
to use kerberos ?

> user at host:~$ klist
> klist: No credentials cache found (ticket cache FILE:/tmp/krb5cc_1000)
> user at host:~$ kinit user
> Password for user at EXAMPLE.COM:
> user at host:~$ klist
> Ticket cache: FILE:/tmp/krb5cc_1000
> Default principal: user at EXAMPLE.COM
>
> Valid starting     Expires            Service principal
> 01/26/11 23:30:12  01/27/11 09:30:12  krbtgt/EXAMPLE.COM at EXAMPLE.COM
>        renew until 01/27/11 23:30:07
>
> Any idea, whats wrong here?

what do you think is wrong ?
how are you trying to "logging" ? via su? via ssh? other methods ?