[39129] in Kerberos
Re: kadmin not working after server migration, but kdc works
daemon@ATHENA.MIT.EDU (Greg Hudson)
Tue Sep 20 11:47:34 2022
Message-ID: <03a01502-744e-d72f-d8b5-bff5e2980826@mit.edu>
Date: Tue, 20 Sep 2022 11:43:40 -0400
MIME-Version: 1.0
Content-Language: en-US
To: Wouter Verhelst <w@uter.be>, kerberos@mit.edu
From: Greg Hudson <ghudson@mit.edu>
In-Reply-To: <YynL5A9eZog8XQNu@pc220518.home.grep.be>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
On 9/20/22 10:19, Wouter Verhelst wrote:
> I can log in to the server; "kinit" works just fine. However, kadmind
> refuses to start, and when I run "kadmin.local", I get:
>
> root@lounge ~ # kadmin.local
> Authenticating as principal root/admin@GREP.BE with password.
> kadmin.local: Required parameters in kdc.conf missing while initializing kadmin.local interface
This is one of our worst error messages (see
https://krbdev.mit.edu/rt/Ticket/Display.html?id=8247 ).
From experience, this probably means you have a single-DES enctype
listed in supported_enctypes and are using release 1.18. (In 1.17 or
previous the enctype would be recognized; in 1.19 or later the library
would ignore the enctype rather than failing out.) Remove the
single-DES enctype and kadmind should start working again.
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
