[28246] in Kerberos
Re: Using keytab on Windows with KfW
daemon@ATHENA.MIT.EDU (Markus Moeller)
Sun Aug 12 14:03:51 2007
To: kerberos@mit.edu
From: "Markus Moeller" <huaraz@moeller.plus.com>
Date: Sun, 12 Aug 2007 19:02:52 +0100
Message-ID: <f9ni0t$ikt$1@sea.gmane.org>
X-Complaints-To: usenet@sea.gmane.org
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
Thanks for the pointer. I thought I fixed the enctypes in krb5.ini too, but
copied it under the domain_realm section instead of libdefaults. (The
default krb5.ini didn't have the same order as my krb5.conf )
Markus
"Christopher D. Clausen" <cclausen@acm.org> wrote in message
news:f9nfsm$9um$1@news.ks.uiuc.edu...
> Markus Moeller <huaraz@moeller.plus.com> wrote:
>> I am trying to use a keytab on Windows with KfW 3.2, but get always
>> an error "Key table entry not found while getting initial
>> credentials". The account works interactively and if I use the keytab
>> on Unix it works fine too.
>> Is this a known problem ?
>>
>> Markus
>>
>> D:\>"c:\Program Files\mit\Kerberos\bin\klist.exe" -ekt mmn.keytab
>> Keytab name: FILE:mmn.keytab
>> KVNO Timestamp Principal
>> ---- -----------------
>> -------------------------------------------------------- 1 08/12/07
>> 17:37:59 markus@SUSE.HOME (ArcFour with HMAC/md5)
>>
>> D:\>"c:\Program Files\mit\Kerberos\bin\kinit.exe" -kt mmn.keytab
>> markus@SUSE.HOME
>> kinit.exe(v5): Key table entry not found while getting initial
>> credentials
>
> Works for me with a keytab from an MIT realm. What Kerberos version /
> flavor is running on your KDC? Could it be a problem with supported
> enc_types? What does your krb5.conf look like?
>
> C:\>which -a kinit
> C:\Program Files\MIT\Kerberos\bin\kinit.exe
>
> C:\>filever "C:\Program Files\MIT\Kerberos\bin\kinit.exe"
> --a-- W32i APP ENU 3.2.0.7005 shp 47,616 05-03-2007 kinit.exe
>
> C:\>klist -kt krb5.keytab
> Keytab name: FILE:krb5.keytab
> KVNO Timestamp Principal
> ---- ----------------- --------------------------------------------------------
> 3 04/27/07 21:46:09 bak-email@ILLIGAL.UIUC.EDU
> 3 04/27/07 21:46:09 bak-email@ILLIGAL.UIUC.EDU
> 3 04/27/07 21:46:09 bak-email@ILLIGAL.UIUC.EDU
> 3 04/27/07 21:46:09 bak-email@ILLIGAL.UIUC.EDU
> 3 04/27/07 21:46:09 bak-email@ILLIGAL.UIUC.EDU
>
> C:\>kinit -kt krb5.keytab bak-email@ILLIGAL.UIUC.EDU
>
> C:\>klist
> Default principal: bak-email@ILLIGAL.UIUC.EDU
> Valid starting Expires Service principal
> 08/12/07 12:18:03 08/12/07 22:18:00
> krbtgt/ILLIGAL.UIUC.EDU@ILLIGAL.UIUC.EDU
>
> <<CDC
>
> ________________________________________________
> Kerberos mailing list Kerberos@mit.edu
> https://mailman.mit.edu/mailman/listinfo/kerberos
>
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
