[24919] in Kerberos
Re: kadmin: Cannot contact any KDC for requested realm
daemon@ATHENA.MIT.EDU (Jeremy Hunt)
Thu Nov 10 02:05:17 2005
Message-Id: <26137220.1131575758858.JavaMail.root@optim1>
Date: Thu, 10 Nov 2005 09:35:58 +1100
From: Jeremy Hunt <jeremyh@optimation.com.au>
Mime-Version: 1.0
To: kerberos@mit.edu
In-Reply-To: <2175170.1131518313020.JavaMail.root@optim1>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
Including the following entry in the libdefaults section of krb5.conf
dns_lookup_kdc = false
will probably work.
and if you don't want dns for the realm either, then add the following
entry as well:
dns_lookup_realm = false
See /krb5/man/man5/krb5.conf.5 for details.
david.turing wrote:
> [safeTgram (optim1) receive status: NOT encrypted, NOT signed.]
>
>
> When kinit is run, it will find KDC for TGT .
> Cannot contact any KDC for requested means that it can not find the KDC,
> probably the DNS can resolve the KDC host name.
> Solution is also very simple, in your krb.conf, type your kdc's ip instead of the
> KDC 's host name. hope this would help :)
>
>
> ----- Original Message -----
> From: "Kevin Coffman" <kwc@citi.umich.edu>
> To: "yi zeng" <bigwhite@gmail.com>
> Cc: <kerberos@mit.edu>
> Sent: Wednesday, October 26, 2005 10:07 PM
> Subject: Re: kadmin: Cannot contact any KDC for requested realm while initializing kadmin interface
>
>
>
>> I would suspect a simple error in the configuration of your local
>> realm in /etc/krb5.conf, or a DNS issue.
>>
>> Can you post your /etc/krb5.conf ?
>>
>> On 10/26/05, yi zeng <bigwhite@gmail.com> wrote:
>>
>>> Hi, there,
>>> I set up a MIT Kerberos 5 master kdc on a pc in a private domain. I have
>>> /etc/hosts mapping hostname of the pc to its ip address and /etc/krb5.conf
>>> pointing kdc to the host name, which i believe correctly set.
>>> The problem is that, I can do kadmin.local but I just couldn't do kadmin.
>>> It always complains:
>>> kadmin: Cannot contact any KDC for requested realm while initializing kadmin
>>> interface
>>> kinit with no parameters reports the similar error:
>>> kinit(v5): Cannot contact any KDC for requested realm while getting initial
>>> credentials
>>> but kinit works if I supply a principal from another realm (that realm and
>>> its kdc is also set in /krb5.conf).
>>> I am confused that why kinit and kadmin just couldn't work in local realm?
>>> Is this a feature or I missed any setting issues?
>>> Thank you very much.
>>> yizeng
>>>
>> ________________________________________________
>> Kerberos mailing list Kerberos@mit.edu
>> https://mailman.mit.edu/mailman/listinfo/kerberos
>>
>>
>
> ________________________________________________
> Kerberos mailing list Kerberos@mit.edu
> https://mailman.mit.edu/mailman/listinfo/kerberos
>
>
>
>
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
