Hi,
I have successfully generated the keytab file. But while verifying it on
the server using kinit I get the following error.
"kinit(v5): Cannot find KDC for requested realm while getting initial
credentials"
Below is a part of my krb5.conf file.
What value do we give in kdc?
[libdefaults]
default_realm = TESTATL.COM
default_keytab_name =/usr/kerberos/myspnaccount.keytab
dns_lookup_realm = false
dns_lookup_kdc = false
default_tkt_enctypes = rc4-hmac
default_tgs_enctypes = rc4-hmac
ticket_lifetime = 24h
forwardable = yes
[realms]
TESTATL.COM = {
kdc = myspnaccount.testatl.com:88
}
On Wed, Jan 18, 2012 at 5:49 PM, Fred Jacquet <[email protected]>wrote:
> It is your ad domain name
>
> Le 18 janv. 2012 à 12:58, Chetna Pant <[email protected]> a écrit :
>
> Hi,
>
> While generating keytab file using
>
> ktpass.exe /out myspnaccount.keytab /princ
> HTTP/[email protected] /pass *
> /[email protected] /ptype KRB5_NT_PRINCIPAL /crypto
> DES-CBC-MD5
>
> This asks for YOUR.REALM.HERE. What do we need to give as "Realm"???
>
>
> --
> Thanks & Regards,
> Chetna Pant
>
> --
> You are currently subscribed to [email protected] as:
> [email protected]
> To unsubscribe, change settings or access archives, see
> http://www.ja-sig.org/wiki/display/JSG/cas-user
>
> --
> You are currently subscribed to [email protected] as:
> [email protected]
> To unsubscribe, change settings or access archives, see
> http://www.ja-sig.org/wiki/display/JSG/cas-user
>
>
--
Thanks & Regards,
Chetna Pant
--
You are currently subscribed to [email protected] as:
[email protected]
To unsubscribe, change settings or access archives, see
http://www.ja-sig.org/wiki/display/JSG/cas-user
