Kadmin compatibility

Derek Yarnell derek at umiacs.umd.edu
Fri Jun 17 16:58:21 EDT 2011


Hi,

So currently we have a RHEL4 krb5-server-1.3.4-62.el4_8.2 kadmind
running. The new RHEL6 krb5-workstation-1.9-9.el6 kadmin client can not
connect to the kadmind server,

>From the normal 'kadmin -p user/admin' command we get, GSS-API (or
Kerberos) error while initializing kadmin interface.

>From the perl-Authen-Krb5-Admin we get, Programmer error! Bad API
structure version.

The server sees the following,

kadmind[5009](Notice): Authentication attempt failed: x.x.x.x, GSS-API
error strings are:
kadmind[5009](Notice): Authentication attempt failed: x.x.x.x, GSS-API
error strings are:
kadmind[5009](Notice):     Incorrect channel bindings were supplied
kadmind[5009](Notice):     Incorrect channel bindings were supplied
kadmind[5009](Notice):     No error
kadmind[5009](Notice):     No error
kadmind[5009](Notice):    GSS-API error strings complete.
kadmind[5009](Notice):    GSS-API error strings complete.

Are we just out of luck and need to upgrade, we were planning on it?
Normal kinit/kpasswd operations work fine.

Thanks,
derek

-- 
---
Derek T. Yarnell
University of Maryland
Institute for Advanced Computer Studies



More information about the Kerberos mailing list