* Douglas E. Engert <[EMAIL PROTECTED]>:

> >I can also use the kerberized telnetd (/usr/bin/telnet.krb5 from the
> >krb5-clients package) and log into that host successfully (with the
> >username & password that the win2k provides).
> 
> This should have had the same error, 

That's why I tried it as alternative... I even used sshd and PAM and
that worked as well.

> >Jan 31 20:54:05 vpn-gw-int openvpn[3005]: pam_krb5: verify_krb_v5_tgt(): 
> >krb5_kt_read_service_key(): Key table entry not found
> 
> 
> This implies it can not find the keytab file entry for the host.

But it's there:

--------------- snip -----------------

# ktutil
ktutil:  list
slot KVNO Principal
---- ---- ---------------------------------------------------------------------
ktutil:  rkt /etc/krb5.keytab
ktutil:  list
slot KVNO Principal
---- ---- ---------------------------------------------------------------------
   1    1        host/[EMAIL PROTECTED]
   2    1        host/[EMAIL PROTECTED]
   3    1 openvpn-krb5/[EMAIL PROTECTED]
   4    1        host/[EMAIL PROTECTED]
   5    1 openvpn-krb5/[EMAIL PROTECTED]
ktutil: q

--------------- snip -----------------


-- 
_________________________________________________

  Charité - Universitätsmedizin Berlin
_________________________________________________

  Ralf Hildebrandt
   i.A. Geschäftsbereich Informationsmanagement
   Campus Benjamin Franklin
   Hindenburgdamm 30 | Berlin
   Tel. +49 30 450 570155 | Fax +49 30 450 570962
   [EMAIL PROTECTED]
   http://www.charite.de
________________________________________________
Kerberos mailing list           [email protected]
https://mailman.mit.edu/mailman/listinfo/kerberos

Reply via email to