krb5 with anonymous kinit, "Cannot allocate memory"

[James Croall]

I should add, this error occurs when running kinit -n.

I can still kinit as a user on an already setup host and get a TGT.

- James



James Croall | Senior Product Manager
Coverity | 185 Berry Street | Suite 6500, Lobby 3 | San Francisco, CA
94107 
Office: 415.694.5354 | Mobile: 202.246.6613 | jcroall at coverity.com
The Leader in Development Testing





On 10/11/13 2:49 PM, "James Croall" <jcroall at coverity.com> wrote:

>Hi All,
>
>Thanks again for the help getting anonymous kinit running! We have been
>running in production for over a month and things are goingŠ well. Until
>today.
>
>This week a new error occurred on the KDC side:
>
>Oct 11 21:25:57 sso krb5kdc[10394](info): AS_REQ (4 etypes {18 17 16 23})
>10.0.1.13: NEEDED_PREAUTH: WELLKNOWN/ANONYMOUS at TRIAL.COVERITY.COM for
>krbtgt/TRIAL.COVERITY.COM at TRIAL.COVERITY.COM, Additional
>pre-authentication required
>Oct 11 21:25:58 sso krb5kdc[10394](info): AS_REQ (4 etypes {18 17 16 23})
>10.0.1.13: KDC_RETURN_PADATA: WELLKNOWN/ANONYMOUS at TRIAL.COVERITY.COM for
>krbtgt/TRIAL.COVERITY.COM at TRIAL.COVERITY.COM, Cannot allocate memory
>
>It is the second line that is problematic. The kinit side reports:
>
>kinit: Generic error (see e-text) while getting initial credentials
>
>The system is not out of memory. No system configuration changes have
>been made. I am at a loss. Googling around I see strange reports of this
>error coming and then going and I don't know what to make of it.
>
>Any ideas?
>
>- James
>
>James Croall | Senior Product Manager
>Coverity | 185 Berry Street | Suite 6500, Lobby 3 | San Francisco, CA
>94107
>Office: 415.694.5354 | Mobile: 202.246.6613 |
>jcroall at coverity.com<mailto:jcroall at coverity.com>
>The Leader in Development Testing
>________________________________________________
>Kerberos mailing list           Kerberos at mit.edu
>https://mailman.mit.edu/mailman/listinfo/kerberos
>