[krbdev.mit.edu #3128] kadmin: Matching credential not found while initializing kadmin interface

[The RT System itself via RT]

>From krb5-bugs-incoming-bounces at PCH.mit.edu  Thu Jul 28 13:46:52 2005
Received: from pch.mit.edu (PCH.MIT.EDU [18.7.21.90]) by krbdev.mit.edu (8.9.3p2) with ESMTP
	id NAA09740; Thu, 28 Jul 2005 13:46:52 -0400 (EDT)
Received: from pch.mit.edu (pch.mit.edu [127.0.0.1])
	by pch.mit.edu (8.12.8p2/8.12.8) with ESMTP id j6SHkBWn011442
	for <krb5-send-pr at krbdev.mit.edu>; Thu, 28 Jul 2005 13:46:11 -0400
Received: from fort-point-station.mit.edu (FORT-POINT-STATION.MIT.EDU
	[18.7.7.76])
	by pch.mit.edu (8.12.8p2/8.12.8) with ESMTP id j6RIXCWn010061
	for <krb5-bugs-incoming at PCH.mit.edu>; Wed, 27 Jul 2005 14:33:12 -0400
Received: from emr1.eu.uu.net (emr1.eu.uu.net [195.129.12.212])
	j6RIXEk0029259
	for <krb5-bugs at mit.edu>; Wed, 27 Jul 2005 14:33:15 -0400 (EDT)
Received: from localhost.uu.net ([127.0.0.1] helo=localhost)
	by emr1.eu.uu.net with esmtp id 1DxqiQ-0001ki-63
	for krb5-bugs at mit.edu; Wed, 27 Jul 2005 18:33:14 +0000
Received: from sol10build.svc.ops.eu.uu.net ([146.188.99.180])
	by emr1.eu.uu.net with esmtp id 1DxqiB-0001fv-Gg
	for krb5-bugs at mit.edu; Wed, 27 Jul 2005 18:32:59 +0000
Received: by sol10build.svc.ops.eu.uu.net 
	id j6RIWxpf009025; Wed, 27 Jul 2005 18:32:59 GMT
Date: Wed, 27 Jul 2005 18:32:59 GMT
Message-Id: <j6RIWxpf009025.200507271832 at sol10build.svc.ops.eu.uu.net>
To: krb5-bugs at mit.edu
From: stephen.carrie at mci.com
X-send-pr-version: 3.99
X-Spam-Score: -1.07
X-Spam-Flag: NO
X-Scanned-By: MIMEDefang 2.42
X-Mailman-Approved-At: Thu, 28 Jul 2005 13:44:48 -0400
Subject: None
X-BeenThere: krb5-bugs-incoming at mailman.mit.edu
X-Mailman-Version: 2.1
Precedence: list
Reply-To: stephen.carrie at mci.com
Sender: krb5-bugs-incoming-bounces at PCH.mit.edu
Errors-To: krb5-bugs-incoming-bounces at PCH.mit.edu


>Submitter-Id:	net
>Originator:	Stephen D Carrie
>Organization: MCI
>Confidential:	no
>Synopsis:	kadmin: Matching credential not found while initializing kadmin interface
>Severity:	serious 
>Priority:	medium
>Category:	krb5-admin
>Class:		support
>Release:	1.4.2-beta1 (also 1.4.1)
>Environment: SunOS5.10, sparc
System: SunOS sol10build.svc.ops.eu.uu.net 5.10 Generic_118822-02 sun4u sparc SUNW,Ultra-60
Architecture: sun4

>Description:
	We have an application that executes kinit to get credentials
	for multiple kadmin operations, using KRB5CCNAME to specify the
	location of the credentials, thus:

		KRB5CCNAME=/tmp/krb5.ccache
		kinit user/admin
		kadmin -p user/admin -c /tmp/krb5.ccache -q "[kadmin ops]"
		kadmin ...

	We were previously using version 1.3.5 which allowed this to
	work, but our tests with 1.4.1 and 1.4.2-beta1 result in the following
	error:

	kadmin: Matching credential not found while initializing kadmin interface

	However, running kadmin directly (with no cache) works OK. 
	
>How-To-Repeat:

	A specific instance would be where we add a principal and a keytab 
	entry in one operation:

	KRB5CCNAME=/tmp/krb5.ccache
	export KRB5CCNAME
        kinit user/admin
        kadmin -p user/admin -c /tmp/krb5.ccache -q "addprinc -pw biteme host/hostname.isp.net"
	kadmin -p user/admin -c /tmp/krb5.ccache -q "ktadd host/hostname.isp.net"




>Fix:
	Unknown.