Kadmin compatibility

Tom Yu tlyu at MIT.EDU
Fri Jun 17 17:33:21 EDT 2011


Derek Yarnell <derek at umiacs.umd.edu> writes:

> So currently we have a RHEL4 krb5-server-1.3.4-62.el4_8.2 kadmind
> running. The new RHEL6 krb5-workstation-1.9-9.el6 kadmin client can not
> connect to the kadmind server,

> kadmind[5009](Notice): Authentication attempt failed: x.x.x.x, GSS-API
> error strings are:
> kadmind[5009](Notice): Authentication attempt failed: x.x.x.x, GSS-API
> error strings are:
> kadmind[5009](Notice):     Incorrect channel bindings were supplied
> kadmind[5009](Notice):     Incorrect channel bindings were supplied
> kadmind[5009](Notice):     No error
> kadmind[5009](Notice):     No error
> kadmind[5009](Notice):    GSS-API error strings complete.
> kadmind[5009](Notice):    GSS-API error strings complete.

This is probably a known bug that is a side effect of some IPv6
changes to the RPC library in the krb5-1.9 release.  It should be
fixed in the upcoming krb5-1.9.2 release.

    http://krbdev.mit.edu/rt/Ticket/Display.html?id=6920



More information about the Kerberos mailing list