asd dsa wrote:
Maybe auth_gssapi_hostname should = melchior.td.pmz.com.ua since that's
what is in your keytab.

Yep, it helps, but ive got another error:

auth: Info: gssapi(?,192.168.1.2): While processing incoming data: Unspecified 
GSS failure.  Minor code may provide more information
auth: Info: gssapi(?,192.168.1.2): While processing incoming data: Unknown code 
krb5 230

I destroyed kerberos cache in /tmp/krb*, but nothing changed.

It's been a while since I've really messed with Kerberos, but I did find a page [1] which talked a little about krb5 error 230.

It said:
Error 230 in the krb5 table is KRB5_KT_KVNONOTFOUND, "Key version number for principal in key table is incorrect".

Maybe that will help by giving you a starting point.

Willie

[1] http://mailman.mit.edu/pipermail/kerberos/2009-February/014506.html

Reply via email to