krb5 with anonymous kinit, "Cannot allocate memory"

[James Croall]

Hi All,

Thanks again for the help getting anonymous kinit running! We have been running in production for over a month and things are going… well. Until today.

This week a new error occurred on the KDC side:

Oct 11 21:25:57 sso krb5kdc[10394](info): AS_REQ (4 etypes {18 17 16 23}) 10.0.1.13: NEEDED_PREAUTH: WELLKNOWN/ANONYMOUS at TRIAL.COVERITY.COM for krbtgt/TRIAL.COVERITY.COM at TRIAL.COVERITY.COM, Additional pre-authentication required
Oct 11 21:25:58 sso krb5kdc[10394](info): AS_REQ (4 etypes {18 17 16 23}) 10.0.1.13: KDC_RETURN_PADATA: WELLKNOWN/ANONYMOUS at TRIAL.COVERITY.COM for krbtgt/TRIAL.COVERITY.COM at TRIAL.COVERITY.COM, Cannot allocate memory

It is the second line that is problematic. The kinit side reports:

kinit: Generic error (see e-text) while getting initial credentials

The system is not out of memory. No system configuration changes have been made. I am at a loss. Googling around I see strange reports of this error coming and then going and I don't know what to make of it.

Any ideas?

- James

James Croall | Senior Product Manager
Coverity | 185 Berry Street | Suite 6500, Lobby 3 | San Francisco, CA  94107
Office: 415.694.5354 | Mobile: 202.246.6613 | jcroall at coverity.com<mailto:jcroall at coverity.com>
The Leader in Development Testing