Hi Marcus,
When i use
modprinc -requires_preauth
Then try to kinit user
it prompts incorrect password
then i should change the password so that it works, but i guess upon changing
the password
the princ is being modified again... thus i guess that the
-requires_preauth isnt set anymore...
Hi Marcus,
When i use
modprinc -requires_preauth
Then try to kinit user
it prompts incorrect password
then i should change the password so that it works, but i guess upon changing
the password
the princ is being modified again... thus i guess that the
-requires_preauth isnt set
Hi marcus,
My getprinc for HTTP/[EMAIL PROTECTED]
kadmin.local: getprinc HTTP/[EMAIL PROTECTED]
Principal: HTTP/[EMAIL PROTECTED]
Expiration date: [never]
Last password change: Sun Feb 18 10:00:03 GMT 2007
Password expiration date: [none]
Maximum ticket life: 24855 days 03:14:07
Maximum
Hi marcus,
My getprinc for HTTP/[EMAIL PROTECTED]
kadmin.local: getprinc HTTP/[EMAIL PROTECTED]
Principal: HTTP/[EMAIL PROTECTED]
Expiration date: [never]
Last password change: Sun Feb 18 10:00:03 GMT 2007
Password expiration date: [none]
Maximum ticket life: 24855 days 03:14:07
Scotty Dan wrote:
...
Hi marcus,
My getprinc for HTTP/[EMAIL PROTECTED]
kadmin.local: getprinc HTTP/[EMAIL PROTECTED]
Principal: HTTP/[EMAIL PROTECTED]
Expiration date: [never]
Last password change: Sun Feb 18 10:00:03 GMT 2007
Password expiration date: [none]
Maximum
scotty adams [EMAIL PROTECTED] writes:
Hi Marcus,
it seems that i can't even kinit over scotty
bash-2.05# kinit scotty
Password for [EMAIL PROTECTED]:
kinit: Preauthentication failed while getting initial credentials
same error as that of kadmin
How can i turn off REQUIRES_PRE_AUTH
hi,
after i modified the principal using modprinc -requires_preauth
kinit scotty
kinit: Password incorrect
Why!!!
Marcus Watts [EMAIL PROTECTED] wrote: scotty adams writes:
Hi Marcus,
it seems that i can't even kinit over scotty
bash-2.05# kinit scotty
Password for [EMAIL
scotty adams [EMAIL PROTECTED] writes:
hi,
after i modified the principal using modprinc -requires_preauth
kinit scotty
kinit: Password incorrect
Why!!!
I don't know. Could be lots and lots of things. For instance:
/1/ password *is* incorrect.
/2/ operator error --
Hi Marcus,
it seems that i can't even kinit over scotty
bash-2.05# kinit scotty
Password for [EMAIL PROTECTED]:
kinit: Preauthentication failed while getting initial credentials
same error as that of kadmin
How can i turn off REQUIRES_PRE_AUTH on the principal?
Thanks,
Scotty
Marcus Watts
various wrote:
...
Ken Hornstein [EMAIL PROTECTED] wrote: Then what is the problem???
How can it be solved? i am really stuck
Sigh. If nothing useful appears in kadmind or kdc logs ... well, the only
way I know of to debug this problem is to run kadmin under the debugger
and trace down
Hi,
This is what i am getting after all
bash-2.05# kadmin scotty
Enter Password:
Enter Password:
kadmin: Preauthentication failed while initializing kadmin interface
kdc.log shows:
Feb 12 12:54:10 scotty krb5kdc[14905](info): AS_REQ 192.168.1.12(88):
PREAUTH_FAILED: scotty/[EMAIL PROTECTED]
scotty adams [EMAIL PROTECTED] wrote:
This is what i am getting after all
bash-2.05# kadmin scotty
Enter Password:
Enter Password:
kadmin: Preauthentication failed while initializing kadmin interface
Preauth failed is usally a wrong password message.
Can you kinit scotty ?
CDC
scotty adams [EMAIL PROTECTED] writes:
Hi,
This is what i am getting after all
bash-2.05# kadmin scotty
Enter Password:
Enter Password:
kadmin: Preauthentication failed while initializing kadmin interface
kdc.log shows:
Feb 12 12:54:10 scotty krb5kdc[14905](info): AS_REQ
Then what is the problem???
How can it be solved? i am really stuck
Sigh. If nothing useful appears in kadmind or kdc logs ... well, the only
way I know of to debug this problem is to run kadmin under the debugger
and trace down the problem. One thing comes to mind: it looks like you
have NAT
Hi,
Here is the log line found under kdc.log
Feb 11 15:50:50 scotty krb5kdc[17623](info): AS_REQ 192.168.1.12(88): ISSUE:
authtime 1171216250, scotty/[EMAIL PROTECTED] for kadmin/[EMAIL PROTECTED]
Times on both servers are identical
Pls advise
Thanks,
scotty
Ken Hornstein [EMAIL
Scotty,
From your entry in the kdc.log it looks to me like you do have a valid
admin principal and your password is correct, so I am guessing your
permissions for that principal are wrong.
Look in your /krb5/var/krb5kdc/kadm5.acl file on the kerberos master, to
see if the principal you are
Hi all,
I am getting the following error
bash-2.05# kadmin -p scotty
Enter Password:
kadmin: GSS-API (or Kerberos) error while initializing kadmin interface
in the /var/krb5/kdc.log file i get the following
Feb 10 13:12:18 scotty krb5kdc[17623](info): AS_REQ 192.168.1.12(88): ISSUE:
authtime
I tried the following:
bash-2.05# kadmin -p kadmin/scottie.beirut.navlink.com
Enter Password:
kadmin: Incorrect password while initializing kadmin interface
even the password that i used is surely correct!!!
Please point me out to these two errors.
Regards,
Scotty
scotty adams [EMAIL
bash-2.05# kadmin -p kadmin/scottie.beirut.navlink.com
Enter Password:
kadmin: Incorrect password while initializing kadmin interface
Well, you definately don't want to use -p kadmin/scottie.beruit.navlink.com,
that's a password you don't know.
# kadmin -p scotty
Enter Password:
kadmin: GSS-API
hey, what about the time delta?
Please check the time delta between ur client server should not be more
than 5 mins.If it is so, then change the time on client re-try.
(If the server and client are both on same m/c then in that case, plz ignore
this mail.)
Regards,
Rathor
Hi Soctty,
Unfortunately, I've been on Holiday for over the Christmas break, so I
didn't check my email.
It looks like the problem is that you're defining a realm for each
computer rather than for your network.
So, if your domain is called example.com, and your computers are called
gaza and
hi Scotty,
First things first...
After i erased the principal.db and created it from the beginning and
followed some steps..
I hope ur some steps includes configuring the KDC and the client.
Here is the step by step procedure for ur ready reckoner:
1. Export binary path in PATH env. var. Do
Hi Edward,
I am really thankful for your reply.
I am new in the field of KERBEROS and I don't know much about it, i went over
some white papers that i have found on the net with no luck i have always been
stuck everywhere.
I cleaned everything from the begining and i urgently need your help to
Hi Scotty,
The problem sounds like the Kerberos realms are different on each
machine, rather than the hosts name.
What is the default realm for the kdc and the client machine? Also, if
you do a klist before running kadmin, what realm does it list?
Regards
Edward Murrell
[EMAIL PROTECTED]
I have an interesting problem. I cannot access the kadmin server on my
master kdc from most of the kadmin clients on my network. My KDC is
Redhat 7 but I cannot tell what version of Kerberos it's using; (problem
2. :-) The other interesting thing about the problem is that this all
worked
Em Thu, Jan 24, 2002 at 12:09:38PM -0600, Steve Langasek escreveu:
I've found that I have to do this locally even if I have all SRV records
in place. Either there's something wrong with the SRV record I'm using,
or the kadmin from MIT KRB5 1.2.3 doesn't check SRV records.
The documentation
When trying to run kadmin from a host, I receive the following error
message: Required parameters in kdc.conf missing while initializing kadmin
interface. I have checked my kdc.conf file and things look good.
Any thoughts...
Check if you have an admin entry in /etc/krb5.conf, like:
[realms]
YOUR.REALM = {
kdc = your.kdc.server
admin_server = your.kdc.server
default_domain = your.domain
}
Em Thu, Jan 24, 2002 at 12:24:23PM -0500, Test News escreveu:
On Thu, Jan 24, 2002 at 12:24:23PM -0500, Test News wrote:
When trying to run kadmin from a host, I receive the following error
message: Required parameters in kdc.conf missing while initializing kadmin
interface. I have checked my kdc.conf file and things look good.
Any thoughts...
This
29 matches
Mail list logo
