[28197] in Kerberos
Re: "Key table entry not found while verifying ticket for server"
daemon@ATHENA.MIT.EDU (Peter Losher)
Sun Aug 5 04:14:18 2007
Message-ID: <46B586CD.20608@isc.org>
Date: Sun, 05 Aug 2007 01:14:05 -0700
From: Peter Losher <Peter_Losher@isc.org>
MIME-Version: 1.0
To: Russ Allbery <rra@stanford.edu>
In-Reply-To: <877ioa1klf.fsf@windlord.stanford.edu>
Cc: kerberos@mit.edu
Content-Type: multipart/mixed; boundary="===============2103848945=="
Errors-To: kerberos-bounces@mit.edu
This is an OpenPGP/MIME signed message (RFC 2440 and 3156)
--===============2103848945==
Content-Type: multipart/signed; micalg=pgp-sha1;
protocol="application/pgp-signature";
boundary="------------enig04F1E17A59002C32ED187C5A"
This is an OpenPGP/MIME signed message (RFC 2440 and 3156)
--------------enig04F1E17A59002C32ED187C5A
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
Russ Allbery wrote:
> Either the system doesn't have a keytab or the keytab that it has doesn=
't
> contain a key for what ksu thinks it should use. ksu tries to obtain a=
> service ticket for host/<fully-qualified-hostname>, so a common cause o=
f
> this is a mismatch between what DNS and/or /etc/hosts thinks the name o=
f
> the machine is and what's in the keytab.
Yup, I had fatfingered the hostname during the initial OS install; what
you said above reminded me to check the one place I hadn't updated -
/etc/hosts. :)
Anyway, it's now in the archives for others to see, which is a bonus. :)
Thanks Russ - Peter
--=20
Peter_Losher@isc.org | ISC | OpenPGP 0xE8048D08 | "The bits must flow"
--------------enig04F1E17A59002C32ED187C5A
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (Darwin)
iD8DBQFGtYbOPtVx9OgEjQgRAhE8AKCPawD8QHXUxa6gTuDov0oI+RqixgCgln6J
LgiU6fuqbi1IZB/HwKMhEAc=
=kR/a
-----END PGP SIGNATURE-----
--------------enig04F1E17A59002C32ED187C5A--
--===============2103848945==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
--===============2103848945==--