[27671] in Kerberos
Re: UNKNOWN_SERVER - Server not ,found in Kerberos database
daemon@ATHENA.MIT.EDU (Russ Allbery)
Wed Apr 18 17:05:45 2007
From: Russ Allbery <rra@stanford.edu>
To: Jeff Blaine <jblaine@kickflop.net>
In-Reply-To: <462685A8.4080904@kickflop.net> (Jeff Blaine's message of "Wed,
18 Apr 2007 16:55:04 -0400")
Date: Wed, 18 Apr 2007 14:05:13 -0700
Message-ID: <87wt09qtpy.fsf@windlord.stanford.edu>
MIME-Version: 1.0
Cc: kerberos@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
Jeff Blaine <jblaine@kickflop.net> writes:
> Can anyone tell me what is going on here? This is what
> krb5kdc logged when I logged into 129.83.11.213.
> -- sshd + UsePAM
> -- pam_krb5.so (RHELv4)
> -- pam_afs_session.so (PAM session module which uses aklog to
> get tokens from a K5 ticket).
> Apr 18 16:46:07 silmaril.foo.com krb5kdc[26891](info): TGS_REQ (1
> etypes {3}) 129.83.11.213: UNKNOWN_SERVER: authtime 1176929167,
> jblaine@rcf.foo.com for afs/rcf.foo.com@rcf.foo.com, Server not
> found in Kerberos database
> Apr 18 16:46:07 silmaril.foo.com krb5kdc[26891](info): TGS_REQ (1
> etypes {1}) 129.83.11.213: UNKNOWN_SERVER: authtime 1176929167,
> jblaine@rcf.foo.com for afs/rcf.foo.com@rcf.foo.com, Server not
> found in Kerberos database
> Apr 18 16:46:07 silmaril.foo.com krb5kdc[26891](info): TGS_REQ (1
> etypes {1}) 129.83.11.213: ISSUE: authtime 1176929167, etypes {rep=16
> tkt=1 ses=1}, jblaine@rcf.foo.com for afs@rcf.foo.com
This looks normal to me. aklog tries the afs/<cell> principal first, and
when it doesn't work, falls back on the older afs@ principal. Is anything
not working, or were you just wondering about the log messages?
--
Russ Allbery (rra@stanford.edu) <http://www.eyrie.org/~eagle/>
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
