On Fri, Aug 31, 2012 at 3:43 PM, Gary Gatling <[email protected]> wrote:
> /usr/local/bin/k5start -U -f /afs/ > unity.ncsu.edu/users/g/gsgatlin/engrranger.ktb > Kerberos initialization for [email protected] > k5start: error getting credentials: Client '[email protected]' not > found in Kerberos database > > Does this error indicate the account is not there? > > I was able to test the password of engrranger via klog, eg: > > pagsh > klog engrranger > Password: > Um. klog means you are using kaserver, which is krb4 only (and has significant security issues; make it go away). kinit and k5start are not going to work, unless you have things configured such that keys can come from a kaserver or a separate krb5 KDC (look for a krb.conf in the AFS server config and multiple kvno-s listed by asetkey) in which case you need to find out what it takes to get the principal added to the latter. -- brandon s allbery [email protected] wandering unix systems administrator (available) (412) 475-9364 vm/sms
