Hi, all!
There is simple Kerberos question.

We have w2k3 PDC here and want to setup one machine
(machine.domain.com) to interoperate with it.
Samba's net ads join works.
kinit works.

but telnet to machine.domain.com from the same machine fails with thw
following debug:
[ Trying mutual KERBEROS5 (host/[EMAIL PROTECTED])... ]
Kerberos V5: mk_req failed (Message stream modified)
[ Trying KERBEROS5 (host/[EMAIL PROTECTED])... ]
Kerberos V5: mk_req failed (Message stream modified)


-bash-2.05b$ klist
Credentials cache: FILE:/tmp/krb5cc_1002
        Principal: [EMAIL PROTECTED]

  Issued           Expires          Principal
Aug 17 21:06:40  Aug 18 07:06:40  krbtgt/[EMAIL PROTECTED]


/etc/krb5.conf:
[libdefaults]
  default_realm = DOMAIN.COM
  default_keytab_name = FILE:/etc/krb5.keytab

  dns_lookup_realm = false
  dns_lookup_kdc = true

[domain_realm]
  .domain.com = DOMAIN.COM


[realms]
  DOMAIN.COM = {
      kdc          = tcp/dc.domain.com
      kpasswd_server = dc.domain.com
      admin_server = udp/dc.domain.com
  }
_______________________________________________
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Reply via email to