[27625] in Kerberos
Re: Changing password on linux machine hangs
daemon@ATHENA.MIT.EDU (qassair@gmail.com)
Wed Apr 4 10:09:25 2007
Message-ID: <7602f04b0704040708v3198a883ic2b47d5138d441d4@mail.gmail.com>
Date: Wed, 4 Apr 2007 09:08:44 -0500
From: M <qassair@gmail.com>
To: "Christopher D. Clausen" <cclausen@acm.org>
In-Reply-To: <2EB6FFA5B3A941BC8C118055D4587264@CDCHOME>
MIME-Version: 1.0
Content-Disposition: inline
Cc: kerberos@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
Yes I do. My default REALM is also correct. I can ping my admin-server
just fine. I've recreated the keytab file to make sure that wasn't the
problem.
Here's the krb5.conf:
[libdefaults]
default_realm = TEST.COM
dns_lookup_realm = true
dns_lookup_kdc = false
forwardable = true
proxiable = true
default_keytab_name = FILE:/etc/krb5.keytab
[realms]
TEST.COM = {
default_domain = TEST.COM
kdc = server1.test.com
kdc = server2.test.com
admin_server = server1.test.com
}
[domain_realm]
.test.com = TEST.COM
test.com = TEST.COM
[appdefaults]
pam = {
debug = false
ticket_lifetime = 36000
renew_lifetime = 36000
krb4_convert = false
forward = true
encrypt = true
}
I can get a ticket just fine if I try kinit@TEST.COM or klist to see
the tickets after logging in.
Thanks
Q
On 4/3/07, Christopher D. Clausen <cclausen@acm.org> wrote:
> M <qassair@gmail.com> wrote:
> > Yep. Tried that. Same behavior. Its not just one linux machine, its
> > all linux machines that do this. So its something thats set
> > environment wide...I've ruled out the firewall...not sure what else it
> > could be.
>
> What does your krb5.conf file look like?
>
> Do you have an "admin_server" specified for your realm?
>
> <<CDC
>
>
>
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
