[39064] in Kerberos
Re: unexpected failure for GSS Pg server
daemon@ATHENA.MIT.EDU (Matt Zagrabelny via Kerberos)
Wed Feb 16 21:02:19 2022
MIME-Version: 1.0
In-Reply-To: <20220208230121.ofmo6nj6k6gra4dn@maia.oucs.ox.ac.uk>
Date: Wed, 16 Feb 2022 19:58:27 -0600
Message-ID: <CAOLfK3Xki=zKNgwBVXwhHM0EXgbd+rchq_KY=e6b3Btvj6PcKA@mail.gmail.com>
To: Dameon Wagner <dameon.wagner@it.ox.ac.uk>
Cc: kerberos <kerberos@mit.edu>
From: Matt Zagrabelny via Kerberos <kerberos@mit.edu>
Reply-To: Matt Zagrabelny <mzagrabe@d.umn.edu>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
On Tue, Feb 8, 2022 at 5:03 PM Dameon Wagner <dameon.wagner@it.ox.ac.uk>
wrote:
>
> Armed with that information, the most likely solution would be to
> extract a fresh keytab (using either the kadmin "ktadd" subcommand, or
> the handy `k5srvutil` command).
>
Thanks for the detailed instructions, Dameon!
Do you know why performing the ktadd increases the kvno? I believe that is
what tripped me up. I thought I was just "re-exporting" the key from the
KDC.
>
> It may appear a bit old, but the O'Reilly book is still a classic
> resource for becoming familiar with Kerberos and how it functions.
>
Ha! Yup! That book is in the office and I have been WFH for the last two
years. :/
Thanks again for the help!
-m
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
