Can't login via krb5 with "User not known to the underlying authentication module" error

ольга крыжановская olga.kryzhanovska at gmail.com
Sun Mar 16 17:53:34 EDT 2014


Can any one help?

Olga

On Sat, Mar 15, 2014 at 3:15 AM, ольга крыжановская
<olga.kryzhanovska at gmail.com> wrote:
> And the kdc log /var/log/krb5/krb5kdc.log gives me this error:
>
> Mar 15 03:06:50 nexentapuzzle krb5kdc[3003](info): AS_REQ (7 etypes
> {18 17 16 23 1 3 2}) 192.168.2.98: CLIENT_NOT_FOUND:
> test001 at NEXENTAPUZZLE.NRUBSIG.ORG for
> krbtgt/NEXENTAPUZZLE.NRUBSIG.ORG at NEXENTAPUZZLE.NRUBSIG.ORG, Client not
> found in Kerberos database
>
> What does that mean?
>
> Olga
>
> On Sat, Mar 15, 2014 at 3:02 AM, ольга крыжановская
> <olga.kryzhanovska at gmail.com> wrote:
>> I am on a Suse 11.3 installation which itself runs the kdc for
>> testing. There is a local account test001, for which I added a
>> principal via kadmin's ank sub command, i.e. 'ank test001'.
>>
>> Now if I wish to log in I can't do it, and see the following error in
>> /var/log/messages:
>>
>> Mar 15 02:29:06 nexentapuzzle login[3531]: User not known to the
>> underlying authentication module
>>
>> Does anyone know what I am doing wrong? Should I do another kadmin
>> command to setup a user, beyond the "ank" sub command?
>>
>> PS: yast option "Ignore Unknown Users" in "Advanced Kerberos Client
>> Configuration" is "OFF", but if I toggle it to "ON" the problem
>> disappears, but I think this might be wrong, or not?
>>
>> Olga
>> --
>>       ,   _                                    _   ,
>>      { \/`o;====-    Olga Kryzhanovska   -====;o`\/ }
>> .----'-/`-/     olga.kryzhanovska at gmail.com   \-`\-'----.
>>  `'-..-| /       http://twitter.com/fleyta     \ |-..-'`
>>       /\/\     Solaris/BSD//C/C++ programmer   /\/\
>>       `--`                                      `--`
>
>
>
> --
>       ,   _                                    _   ,
>      { \/`o;====-    Olga Kryzhanovska   -====;o`\/ }
> .----'-/`-/     olga.kryzhanovska at gmail.com   \-`\-'----.
>  `'-..-| /       http://twitter.com/fleyta     \ |-..-'`
>       /\/\     Solaris/BSD//C/C++ programmer   /\/\
>       `--`                                      `--`



-- 
      ,   _                                    _   ,
     { \/`o;====-    Olga Kryzhanovska   -====;o`\/ }
.----'-/`-/     olga.kryzhanovska at gmail.com   \-`\-'----.
 `'-..-| /       http://twitter.com/fleyta     \ |-..-'`
      /\/\     Solaris/BSD//C/C++ programmer   /\/\
      `--`                                      `--`



More information about the Kerberos mailing list