[28199] in Kerberos
Re: "Key table entry not found while verifying ticket for server"
daemon@ATHENA.MIT.EDU (Christopher D. Clausen)
Sun Aug 5 12:53:50 2007
Message-ID: <F653DF56866B4C1E9C224B218A005E09@CDCHOME>
From: "Christopher D. Clausen" <cclausen@acm.org>
To: <kerberos@mit.edu>
Date: Sun, 5 Aug 2007 11:53:29 -0500
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
Danny Mayer <mayer@ntp.isc.org> wrote:
> Peter Losher wrote:
>> Yup, I had fatfingered the hostname during the initial OS install;
>> what you said above reminded me to check the one place I hadn't
>> updated - /etc/hosts. :)
>
> /etc/hosts??? That doesn't sound like a place ISC would use! Does the
> install process create an entry in hosts?
The install process for nearly all UNIX OSes puts an entry into the
/etc/hosts file.
On some platforms, this end ups as something like:
127.0.0.1 hostname localhost.localdomain localhost
This is bad for Kerberos, although it works for laptops where the
non-local IP may keep changing.
Kerberos needs an entry that returns a fqdn for the host using a valid
external IP, like:
18.4.5.6 validhost.in.dns.fqdn.edu validhost
This is a very common problem for users asking for help in the #kerberos
IRC channel.
<<CDC
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
