[27403] in Kerberos

home	help	back	first	fref	pref	prev	next	nref	lref	last	post

multiple realm setup

daemon@ATHENA.MIT.EDU (Kanika Malhotra)
Wed Feb 7 21:06:41 2007

Message-ID: <9299dfc30702071806s1b9dd317t86af63b9fad40473@mail.gmail.com>
Date: Wed, 7 Feb 2007 18:06:20 -0800
From: "Kanika Malhotra" <kmalhotr@gmail.com>
To: kerberos@mit.edu
MIME-Version: 1.0
Content-Disposition: inline
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu

Hello,

I have been tryin to setup multiple realm support in a Single KDC but keep
encountering the same error -

krb5kdc: Cannot find master key record in database - while verifying master
key for realm <realm2>

I followed the following steps -

created a krb5.conf

[libdefaults]
        default_realm = REALM1
[realms]
        REALM1 = {
                admin_server = server1
                kdc = server1
        }
        REALM2 = {
                admin_server = server2
                kdc = server2
        }


created a kdc.conf

[kdcdefaults]
         kdc_ports = 88

[realms]
    <REALM1> = {
       database_name = /var/db/krb5kdc/principal
       admin_keytab = FILE:/var/db/krb5kdc/kadm5.keytab
       acl_file = /var/db/krb5kdc/kadm5.acl
       kadmin_port = 748
       max_life = 10h 0m 0s
       max_renewable_life = 7d 0h 0m 0s
       master_key_type = des3-hmac-sha1
       supported_enctypes = des3-hmac-sha1:normal arcfour-hmac-md5:normal
des-cbc-crc:normal des-cbc-crc:v4
       kdc_supported_enctypes = des3-hmac-sha1:normal
arcfour-hmac-md5:normal des-cbc-crc:normal des-cbc-crc:v4
    }
    <REALM2> = {
       database_name = /var/db/krb5kdc/realm2/principal
       admin_keytab = FILE:/var/db/krb5kdc/realm2/kadm5.keytab
       admin_database_name = /var/db/krb5kdc/realm2/principal.kadm5
       admin_database_lockfile = /var/db/krb5kdc/realm2/principal.kadm5.lock
       acl_file = /var/db/krb5kdc/realm2/kadm5.acl
       kadmin_port = 748
       max_life = 10h 0m 0s
       max_renewable_life = 7d 0h 0m 0s
       master_key_type = des3-hmac-sha1
       supported_enctypes = des3-hmac-sha1:normal arcfour-hmac-md5:normal
des-cbc-crc:normal des-cbc-crc:v4
       kdc_supported_enctypes = des3-hmac-sha1:normal
arcfour-hmac-md5:normal des-cbc-crc:normal des-cbc-crc:v4
    }

ran kdb5_util
kdb5_util -r REALM2 -d /var/db/krb5kdc/realm2/principal create
kdb5_util -r REALM1 -d /var/db/krb5kdc/principal create

but when I run krb5kdc -r REALM1 -r REALM2

I get the error
krb5kdc: Cannot find master key record in database - while verifying master
key for realm REALM2


any pointers as to what am missing would be appreciated.

Thanks
K
________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

home	help	back	first	fref	pref	prev	next	nref	lref	last	post