kerberos server replication

chechu chechu chechuironman at
Wed Oct 18 16:50:16 EDT 2006

I have two server , both working kdc right. The master (shogun) the
slave (shinobi). I use debian and teh domain is IRONMAN.ES The
replication doesn't work. I followed the next steps:

I created the file /etc/krb5kdc/kpropd.acl in the slave with:

host/ at IRONMAN.ES
host/ at IRONMAN.ES

I add in the master server the next(kadmin.local):

addprinc -randkey host/

addprinc -randkey host/

ktadd host/

ktadd host/

In the server i did:

scp /etc/krb5.keytab shinobi:/etc

and finally i did:

kdb5_util dump /var/Kerberos/krb5kdc/slave_datatrans

I didn't get any error untill here but when i did:

kprop -f /var/Kerberos/krb5kdc/slave_datatrans
> /dev/null

i got this error:

kprop: Connection refused in call to connect while opening connection to

The /var/log/kerberos/krb5kdc.log from the master shoows:

Oct 18 22:45:39 shogun krb5kdc[6080](info): AS_REQ (7 etypes {18 17 16
23 1 3 2}) ISSUE: authtime 1161204339, etypes {rep=16
tkt=16 ses=16}, host/ at IRONMAN.ES for
host/ at IRONMAN.ES

anyone can help me...


More information about the krbdev mailing list