[27437] in Kerberos
Re: Problem with Kerberos Service
daemon@ATHENA.MIT.EDU (Kevin Coffman)
Tue Feb 13 09:21:29 2007
Message-ID: <4d569c330702130621h79609654r90f577f16d6f8ffa@mail.gmail.com>
Date: Tue, 13 Feb 2007 09:21:06 -0500
From: "Kevin Coffman" <kwc@citi.umich.edu>
To: LukePet <luke_pet@yahoo.it>
In-Reply-To: <8940805.post@talk.nabble.com>
MIME-Version: 1.0
Content-Disposition: inline
Cc: kerberos@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
On 2/13/07, LukePet <luke_pet@yahoo.it> wrote:
>
> Then....I have deleted the krb5.keytab file
>
> after I have exect this istructions:
> lukesky@lukesky:~$ sudo kadmin -p krbadm/admin
> kadmin: ktadd -k /etc/krb5.keytab host/lukesky.epiluke.it
>
> now I have this situation:
> lukesky@lukesky:~$ sudo klist -kte
> Keytab name: FILE:/etc/krb5.keytab
> KVNO Timestamp Principal
> ---- -----------------
> --------------------------------------------------------
> 3 02/13/07 09:56:24 host/lukesky.epiluke.it@EPILUKE.IT (Triple DES cbc
> mode with HMAC/sha1)
> 3 02/13/07 09:56:24 host/lukesky.epiluke.it@EPILUKE.IT (DES cbc mode with
> CRC-32)
>
> but It is still wrong.....
> lukesky@lukesky:~$ kinit -kt host/lukesky.epiluke.it@EPILUKE.IT
> kinit(v5): Client not found in Kerberos database while getting initial
> credentials
>
> or
>
> lukesky@lukesky:~$ kinit -k host/lukesky.epiluke.it@EPILUKE.IT
> kinit(v5): Permission denied while getting initial credentials
This was the closest to being correct. You did "sudo klist -kte"
above to read the keytab. You must be root to read it here as well.
So you'd need to do "sudo kinit -k host/lukesky.epiluke.it@EPILUKE.IT"
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
