I'm just trying to get my Solaris 9 native KDC up and running and have run into a problem with kadmin. Both krb5kdc and kadmind are running correctly and I'm able to get a TGT from the KDC. However, when I try to run kadmin, I get the following message at the user interface:
kadmin: GSS-API (or Kerberos) error while initializing kadmin interface Other postings here suggest that this is a fairly common and fairly generic error. In my syslog, I'm seeing these errors: Oct 9 18:08:19 hostname kadmin[429]: [ID 824607 user.error] GSS-API error : rpc_gss_seccreate failed Oct 9 18:08:19 hostname kadmin[429]: [ID 824607 user.error] GSS-API error : The routine completed successfully Oct 9 18:08:19 hostname kadmin[429]: [ID 824607 user.error] GSS-API error : rpc_gss_seccreate failed Oct 9 18:08:19 hostname kadmin[429]: [ID 824607 user.error] GSS-API error : Unknown code 69 In the kdc.log file I'm seeing: krb5kdc: Unknown code 2 - snk4 finding the enctype and key <[EMAIL PROTECTED]> Oct 09 18:08:17 hostname krb5kdc[277](info): AS_REQ 1.2.3.4(88): NEEDED_PREAUTH: [EMAIL PROTECTED] for [EMAIL PROTECTED], Additional pre-authentication required Oct 09 18:08:19 hostname krb5kdc[277](info): AS_REQ 1.2.3.4(88): ISSUE: authtime 1034212099, [EMAIL PROTECTED] for [EMAIL PROTECTED] Nothing seems to be written to the kadmin.log file (perhaps I don't have the configuration correct). My kadmin/admin and kadmin/changepw principals exist in the database and have been extracted to the key table. The configuration files appear correct. Anybody got any suggestions on what might be causing this? Thanks! Sarah ________________________________________________ Kerberos mailing list [EMAIL PROTECTED] http://mailman.mit.edu/mailman/listinfo/kerberos
