[14595] in Kerberos
Re: kadmind: Cannot set GSS-API authentication names.
daemon@ATHENA.MIT.EDU (Tom Yu)
Mon Jun 25 22:42:40 2001
To: Sri Gundavelli <sgundave@cisco.com>
Cc: kerberos@MIT.EDU
From: Tom Yu <tlyu@MIT.EDU>
Date: 25 Jun 2001 22:40:20 -0400
In-Reply-To: Sri Gundavelli's message of "Mon, 25 Jun 2001 18:42:44 -0700"
Message-ID: <ldvzoawdkvf.fsf@saint-elmos-fire.mit.edu>
>>>>> "sgundave" == Sri Gundavelli <sgundave@cisco.com> writes:
sgundave> You need to generate the keytab file for the kadmind. I had
sgundave> the same problem and I had to debug the kadmind sources to
sgundave> identify the problem.
sgundave> kadmin.local:
sgundave> ktadd -k /usr/var/krb5kdc/kadm5.keytab kadmin/admin kadmin/changepw
This should actually be
ktadd -k PREFIX/var/krb5kdc/kadm5.keytab kadmin/admin kadmin/changepw
where PREFIX is /usr/local or whatever you configured krb5 with. Of
course, the default kadm5.keytab location can be overriden by your
kdc.conf.
---Tom
