Cannot contact any KDC for realm

Russ Allbery eagle at eyrie.org
Fri Oct 24 12:55:22 EDT 2014


Lars Hanke <debian at lhanke.de> writes:

> During boot of my system (Debian Wheezy) k5start is invoked to supply a 
> ticket for accessing the AD DC by nslcd. However, during boot it fails:

> k5start: error getting credentials: Cannot contact any KDC for realm 
> 'MY.AD.REALM'

> If I restart k5start using the very same init script once the system is 
> up and running everything works nicely.

> On another system I neither have any issues using a similar boot stack.

> What exactly does this message want to tell me, i.e. where do I start 
> troubleshooting?

It's probably telling you that init script is running before your network
stack is up, and DNS or UDP connectivity is failing when k5start first
runs.

-- 
Russ Allbery (eagle at eyrie.org)              <http://www.eyrie.org/~eagle/>


More information about the Kerberos mailing list