Re: Regarding MIT KDC server setup

[Benjamin Kaduk]

On Wed, 29 Oct 2014, Baghel, Gaurav wrote:

 Hi MIT Team,

 I am doing setup for MIT KDC on solaris machine. I searched a lot over 
 internet, but couldn't find any appropriate doc for the KDC setup.
 Request you to please give me all the steps or link to setup MIT KDC over 
 solaris. Also on one of the KDC I am getting below error:-

 bash-3.00#
 bash-3.00# kadmin.local
 Authenticating as principal root/ad...@ssqa.gdl.englab.netapp.com with 
 password.
 kadmin.local:
 kadmin.local:  list_principals
 get_principals: Database record is incomplete or corrupted while retrieving 
 list.
 kadmin.local:
 kadmin.local:  add_principal -e des-cbc-crc:normal des-cbc-md5:normal 
 -randkey nfs/f3170-29-203.gdl.englab.netapp@ssqa.gdl.englab.netapp.com
 WARNING: no policy specified for 
 nfs/f3170-29-203.gdl.englab.netapp@ssqa.gdl.englab.netapp.com; defaulting 
 to no policy
 Segmentation Fault (core dumped)
 bash-3.00#

That log is different than the transcript from the previous mail you sent
to a different list.

It seems unlikely that anyone will be able to help without a complete
understanding of what has happened to the system in question,
Kerberos-wise, starting from kdb5_util create.

-Ben Kaduk

Kerberos mailing list   Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

RE: Regarding MIT KDC server setup

[Benjamin Kaduk]

I would default to starting from a guide such as
http://web.mit.edu/kerberos/krb5-latest/doc/admin/install_kdc.html and
following up on this list if things don't work as the guide indicates they
should.  (It is not really necessary to install slave KDCs from the start,
if one is still figuring out how things are supposed to work.)

-Ben

On Thu, 30 Oct 2014, Baghel, Gaurav wrote:

 Agree.
 But If I want to setup a new fresh KDC on new machine, could you please help 
 me and share the steps that one should follow.

Kerberos mailing list   Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos