[27673] in Kerberos
Re: UNKNOWN_SERVER - Server not ,found in Kerberos database
daemon@ATHENA.MIT.EDU (Jeff Blaine)
Wed Apr 18 17:07:21 2007
Message-ID: <462688C9.1000501@kickflop.net>
Date: Wed, 18 Apr 2007 17:08:25 -0400
From: Jeff Blaine <jblaine@kickflop.net>
MIME-Version: 1.0
To: Russ Allbery <rra@stanford.edu>
In-Reply-To: <87wt09qtpy.fsf@windlord.stanford.edu>
Cc: kerberos@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
Russ Allbery wrote:
> Jeff Blaine <jblaine@kickflop.net> writes:
>
>> Can anyone tell me what is going on here? This is what
>> krb5kdc logged when I logged into 129.83.11.213.
>
>> -- sshd + UsePAM
>> -- pam_krb5.so (RHELv4)
>> -- pam_afs_session.so (PAM session module which uses aklog to
>> get tokens from a K5 ticket).
>
>> Apr 18 16:46:07 silmaril.foo.com krb5kdc[26891](info): TGS_REQ (1
>> etypes {3}) 129.83.11.213: UNKNOWN_SERVER: authtime 1176929167,
>> jblaine@rcf.foo.com for afs/rcf.foo.com@rcf.foo.com, Server not
>> found in Kerberos database
>
>> Apr 18 16:46:07 silmaril.foo.com krb5kdc[26891](info): TGS_REQ (1
>> etypes {1}) 129.83.11.213: UNKNOWN_SERVER: authtime 1176929167,
>> jblaine@rcf.foo.com for afs/rcf.foo.com@rcf.foo.com, Server not
>> found in Kerberos database
>
>> Apr 18 16:46:07 silmaril.foo.com krb5kdc[26891](info): TGS_REQ (1
>> etypes {1}) 129.83.11.213: ISSUE: authtime 1176929167, etypes {rep=16
>> tkt=1 ses=1}, jblaine@rcf.foo.com for afs@rcf.foo.com
>
> This looks normal to me. aklog tries the afs/<cell> principal first, and
> when it doesn't work, falls back on the older afs@ principal. Is anything
> not working, or were you just wondering about the log messages?
I had a feeling that was the case. Nothing is broken. I was
just curious about the messages.
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
