Can't login via krb5 with "User not known to the underlying authentication module" error

[ольга крыжановская]

And the kdc log /var/log/krb5/krb5kdc.log gives me this error:

Mar 15 03:06:50 nexentapuzzle krb5kdc[3003](info): AS_REQ (7 etypes
{18 17 16 23 1 3 2}) 192.168.2.98: CLIENT_NOT_FOUND:
test001 at NEXENTAPUZZLE.NRUBSIG.ORG for
krbtgt/NEXENTAPUZZLE.NRUBSIG.ORG at NEXENTAPUZZLE.NRUBSIG.ORG, Client not
found in Kerberos database

What does that mean?

Olga

On Sat, Mar 15, 2014 at 3:02 AM, ольга крыжановская
<olga.kryzhanovska at gmail.com> wrote:
> I am on a Suse 11.3 installation which itself runs the kdc for
> testing. There is a local account test001, for which I added a
> principal via kadmin's ank sub command, i.e. 'ank test001'.
>
> Now if I wish to log in I can't do it, and see the following error in
> /var/log/messages:
>
> Mar 15 02:29:06 nexentapuzzle login[3531]: User not known to the
> underlying authentication module
>
> Does anyone know what I am doing wrong? Should I do another kadmin
> command to setup a user, beyond the "ank" sub command?
>
> PS: yast option "Ignore Unknown Users" in "Advanced Kerberos Client
> Configuration" is "OFF", but if I toggle it to "ON" the problem
> disappears, but I think this might be wrong, or not?
>
> Olga
> --
>       ,   _                                    _   ,
>      { \/`o;====-    Olga Kryzhanovska   -====;o`\/ }
> .----'-/`-/     olga.kryzhanovska at gmail.com   \-`\-'----.
>  `'-..-| /       http://twitter.com/fleyta     \ |-..-'`
>       /\/\     Solaris/BSD//C/C++ programmer   /\/\
>       `--`                                      `--`



-- 
      ,   _                                    _   ,
     { \/`o;====-    Olga Kryzhanovska   -====;o`\/ }
.----'-/`-/     olga.kryzhanovska at gmail.com   \-`\-'----.
 `'-..-| /       http://twitter.com/fleyta     \ |-..-'`
      /\/\     Solaris/BSD//C/C++ programmer   /\/\
      `--`                                      `--`