[31021] in Kerberos
Re: KRB5 & Sun Solaris 9
daemon@ATHENA.MIT.EDU (Will Fiveash)
Fri Apr 24 17:25:16 2009
Date: Fri, 24 Apr 2009 16:09:48 -0500
From: Will Fiveash <William.Fiveash@Sun.COM>
To: "McGranahan, Jamen" <jamen.mcgranahan@Vanderbilt.Edu>
Message-ID: <20090424210948.GE14904@sun.com>
Mail-Followup-To: "McGranahan, Jamen" <jamen.mcgranahan@Vanderbilt.Edu>,
"Douglas E. Engert" <deengert@anl.gov>, kerberos@mit.edu
MIME-Version: 1.0
Content-Disposition: inline
In-Reply-To: <63566160FBD1BE43873B5A100A4222DF0AF32491@mailbe17.email.Vanderbilt.edu>
Cc: Will Fiveash <william.fiveash@Sun.COM>, kerberos@mit.edu,
"Douglas E. Engert" <deengert@anl.gov>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
On Fri, Apr 24, 2009 at 03:45:00PM -0500, McGranahan, Jamen wrote:
> * Yes, I can ping the kdc.
Try:
truss -o /tmp/truss.out -u:: kinit
which will show all the functions called and their return values (well,
if they have a non-void return value). This may help pin down why kinit
is failing.
> * Doug: as for the IP address use, we found that for some reason, it
> worked better with the IP on the other 2 boxes we have this installed &
> working. So, keeping the same settings, logic would suggest it should
> work here too.
Well, it really depends on your DNS configuration. Does nslookup work
for the KDC hostname on the Solaris systems? In general it should. Use
of a IP address for the kdc usually indicates a distrust of the DNS
servers.
> I've also tried changing the VANDERBILT.EDU realm with
> just an IP address for the KDC, but that gave me no change. As for why
> we have 2 realms, etc., this was all pre-configured and found to work on
> our other 2 Sun boxes. I really don't know the reasoning behind it.
> Sorry.
>
> Jamen McGranahan
> Systems Services Librarian
> Vanderbilt University
--
Will Fiveash
Sun Microsystems Inc.
http://opensolaris.org/os/project/kerberos/
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
