On Fri, 2010-09-10 at 19:41 -0400, [email protected] wrote:
> /usr/kerberos/sbin/kprop: Software caused connection abort while
> authenticating to server
This error message corresponds to the code ECONNRESET. Such an error
can originate from a socket call, or from the krb5 library if the
connection is closed at an unexpected point in the krb5_sendauth
conversation.
A packet trace from the master's perspective could be enlightening.
Stepping through the kprop code could yield the same information, but
might not be as easy to carry out.
> Sep 10 16:28:18 [FQDN of SLAVE] krb5kdc[10815](info): AS_REQ (6 etypes {1 11
> 10 15 12 13}) 137.150.145.188: ISSUE: authtime 1284161298, etypes {rep=1
> tkt=1 ses=1}, host/[FQDN of sla...@realm for host/[FQDN of sla...@realm
>
> Sep 10 14:36:30 [FQDN of MASTER-KDC] krb5kdc[10815](info): AS_REQ (6 etypes
> {1 11 10 15 12 13}) 137.150.145.188: ISSUE: authtime 1284154590, etypes
> {rep=1 tkt=1 ses=1}, host/[FQDN of master-k...@realm for host/[FQDN of
> master-k...@realm
These messages pertain to acquiring tickets, but don't say anything
about the AP-REQ/AP-REP exchange between the master and slave.
________________________________________________
Kerberos mailing list [email protected]
https://mailman.mit.edu/mailman/listinfo/kerberos
