[19309] in Kerberos_V5_Development
Re: X.509 preauth
daemon@ATHENA.MIT.EDU (Greg Hudson)
Sat Oct 31 11:45:20 2015
To: Pascal Jakobi <pascal.jakobi@gmail.com>, krbdev@MIT.EDU
From: Greg Hudson <ghudson@MIT.EDU>
Message-ID: <5634E206.90806@mit.edu>
Date: Sat, 31 Oct 2015 11:45:10 -0400
MIME-Version: 1.0
In-Reply-To: <5634CADD.6070404@gmail.com>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krbdev-bounces@MIT.EDU
On 10/31/2015 10:06 AM, Pascal Jakobi wrote:
> Problem is that nothing is logged on the KDC side...
There should be a message at startup, like:
Oct 29 13:04:46 equal-rites krb5kdc[19021](Error): preauth pkinit
failed to initialize: No realms configured correctly for pkinit
support
although it isn't as specific as it should be.
> pkinit_identity = FILE:/etc/pki/krb5/certs/kdc_cert.pem, /etc/pki/krb5/private/kdc_key.pem
I don't think the space after the comma there is permitted. (More
precisely, it's treated as part of the pathname for the key file.)
_______________________________________________
krbdev mailing list krbdev@mit.edu
https://mailman.mit.edu/mailman/listinfo/krbdev
