At 11:00 AM 12/17/01 +0100, you wrote:
> >>>>> "Ben" == Ben Ocean <[EMAIL PROTECTED]> writes:
>
>     Ben> #/usr/kerberos/sbin/kadmin.local Authenticating as principal
>     Ben> [EMAIL PROTECTED] with password.
>
>Accessing the KDC on localhost...
>
>     Ben> kadmin.local: q #/usr/kerberos/sbin/kadmin Authenticating as
>     Ben> principal [EMAIL PROTECTED] with
>     Ben> password.  kadmin: Cannot resolve network address for KDC in
>     Ben> requested realm while initializing kadmin interface #
>
>It can't find  the KDC (admin server?) (ie, it  is not specified WHERE
>the KDC  is residing).  Have a  look at the  file '/etc/krb5.conf' (or
>wherever it is on your system).  You should have something:
>
>----- s n i p -----
>[realms]
>         BAYOUR.COM = {
>                 kdc = papadoc.bayour.com:88
>                 admin_server = papadoc.bayour.com:749
>                 default_domain = bayour.com
>         }
>
>[domain_realm]
>         .bayour.com = BAYOUR.COM
>----- s n i p -----
>
>I guess the two important lines are 'kdc = ...' and 'admin_server = ...'.

Here's that file:

[logging]
  default = FILE:/var/log/krb5libs.log
  kdc = FILE:/var/log/krb5kdc.log
  admin_server = FILE:/var/log/kadmind.log

[libdefaults]
  ticket_lifetime = 24000
  default_realm = PERFORMANCEMARKETERS.COM
  dns_lookup_realm = false
  dns_lookup_kdc = false

[realms]
  PERFORMANCEMARKETERS.COM = {
   kdc = kerberos.performancemarketers.com:88
   admin_server = kerberos.performancemarketers.com:749
   default_domain = performancemarketers.com
  }

[domain_realm]
  .performancemarketers.com = PERFORMANCEMARKETERS.COM
  performancemarketers.com = PERFORMANCEMARKETERS.COM

[kdc]
  profile = /var/kerberos/krb5kdc/kdc.conf

[pam]
  debug = false
  ticket_lifetime = 36000
  renew_lifetime = 36000
  forwardable = true
  krb4_convert = false

I'm still having problems. kerberos.performancemarketers.com:88 doesn't 
resolve (nor port 749). I'm presuming I don't need to put anything special 
in my httpd.conf file (which already has a ServerAlias of *.perfor...)
TIA,
BenO


Reply via email to