Can't login via krb5 with "User not known to the underlying authentication module" error
ольга крыжановская
olga.kryzhanovska at gmail.com
Sun Mar 16 17:53:34 EDT 2014
Can any one help?
Olga
On Sat, Mar 15, 2014 at 3:15 AM, ольга крыжановская
<olga.kryzhanovska at gmail.com> wrote:
> And the kdc log /var/log/krb5/krb5kdc.log gives me this error:
>
> Mar 15 03:06:50 nexentapuzzle krb5kdc[3003](info): AS_REQ (7 etypes
> {18 17 16 23 1 3 2}) 192.168.2.98: CLIENT_NOT_FOUND:
> test001 at NEXENTAPUZZLE.NRUBSIG.ORG for
> krbtgt/NEXENTAPUZZLE.NRUBSIG.ORG at NEXENTAPUZZLE.NRUBSIG.ORG, Client not
> found in Kerberos database
>
> What does that mean?
>
> Olga
>
> On Sat, Mar 15, 2014 at 3:02 AM, ольга крыжановская
> <olga.kryzhanovska at gmail.com> wrote:
>> I am on a Suse 11.3 installation which itself runs the kdc for
>> testing. There is a local account test001, for which I added a
>> principal via kadmin's ank sub command, i.e. 'ank test001'.
>>
>> Now if I wish to log in I can't do it, and see the following error in
>> /var/log/messages:
>>
>> Mar 15 02:29:06 nexentapuzzle login[3531]: User not known to the
>> underlying authentication module
>>
>> Does anyone know what I am doing wrong? Should I do another kadmin
>> command to setup a user, beyond the "ank" sub command?
>>
>> PS: yast option "Ignore Unknown Users" in "Advanced Kerberos Client
>> Configuration" is "OFF", but if I toggle it to "ON" the problem
>> disappears, but I think this might be wrong, or not?
>>
>> Olga
>> --
>> , _ _ ,
>> { \/`o;====- Olga Kryzhanovska -====;o`\/ }
>> .----'-/`-/ olga.kryzhanovska at gmail.com \-`\-'----.
>> `'-..-| / http://twitter.com/fleyta \ |-..-'`
>> /\/\ Solaris/BSD//C/C++ programmer /\/\
>> `--` `--`
>
>
>
> --
> , _ _ ,
> { \/`o;====- Olga Kryzhanovska -====;o`\/ }
> .----'-/`-/ olga.kryzhanovska at gmail.com \-`\-'----.
> `'-..-| / http://twitter.com/fleyta \ |-..-'`
> /\/\ Solaris/BSD//C/C++ programmer /\/\
> `--` `--`
--
, _ _ ,
{ \/`o;====- Olga Kryzhanovska -====;o`\/ }
.----'-/`-/ olga.kryzhanovska at gmail.com \-`\-'----.
`'-..-| / http://twitter.com/fleyta \ |-..-'`
/\/\ Solaris/BSD//C/C++ programmer /\/\
`--` `--`
More information about the Kerberos
mailing list