[19310] in Kerberos_V5_Development
Re: X.509 preauth
daemon@ATHENA.MIT.EDU (Pascal Jakobi)
Sat Oct 31 11:59:24 2015
To: Greg Hudson <ghudson@mit.edu>, krbdev@mit.edu
From: Pascal Jakobi <pascal.jakobi@gmail.com>
Message-ID: <5634E551.5050605@gmail.com>
Date: Sat, 31 Oct 2015 16:59:13 +0100
MIME-Version: 1.0
In-Reply-To: <5634CADD.6070404@gmail.com>
Content-Type: multipart/mixed; boundary="------------070107080601060503020208"
Errors-To: krbdev-bounces@mit.edu
This is a multi-part message in MIME format.
--------------070107080601060503020208
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 7bit
I corrected the " " issue in krb5.conf. Does not change anything.
Also rechecked the log (attached). Nothing more than
oct. 31 16:53:52 kdc.jakobi.fr krb5kdc[903](info): AS_REQ (6 etypes
{18 17 16 23 25 26}) 192.168.1.4: NEEDED_PREAUTH: pascal@THALES.COM
for krbtgt/THALES.COM@THALES.COM, Additional pre-authentication required
Thanks again for your help !
P
PS I also checked that pkinit is installed :
[pascal@kdc ~]$ rpm -qa | grep krb5
sssd-krb5-common-1.12.2-58.el7_1.17.x86_64
krb5-workstation-1.12.2-15.el7_1.x86_64
pam_krb5-2.4.8-4.el7.x86_64
krb5-pkinit-1.12.2-15.el7_1.x86_64
sssd-krb5-1.12.2-58.el7_1.17.x86_64
krb5-server-ldap-1.12.2-15.el7_1.x86_64
krb5-server-1.12.2-15.el7_1.x86_64
krb5-libs-1.12.2-15.el7_1.x86_64
On 31.10.2015 03:06 carra, Pascal Jakobi wrote:
> kinit pascal -X
> pkinit_identities='/etc/pki/krb5/certs/pascal_cert.pem,/etc/pki/krb5/private/pascal_key.pem'
> -X509_anchors=/etc/pki/CA/certs/ca_corp_cert.pem -X
> X509_user_identity=C=FR,L=Paris,O=Corp,CN=Pascal
--
Pascal Jakobi <mailto:pascal.jakobi@gmail.com>
116 rue de Stalingrad, 93100 Montreuil
France
Tel : +33 6 87 47 58 19
--------------070107080601060503020208
Content-Type: text/x-log;
name="krb5kdc.log"
Content-Transfer-Encoding: 7bit
Content-Disposition: attachment;
filename="krb5kdc.log"
otp: Loaded
oct. 30 14:20:55 kdc.jakobi.fr krb5kdc[10955](Error): preauth pkinit failed to initialize: No realms configured correctly for pkinit support
oct. 30 14:20:55 kdc.jakobi.fr krb5kdc[10955](info): setting up network...
oct. 30 14:20:55 kdc.jakobi.fr krb5kdc[10955](info): listening on fd 10: udp 0.0.0.0.88 (pktinfo)
krb5kdc: setsockopt(11,IPV6_V6ONLY,1) worked
krb5kdc: Argument invalide - Cannot request packet info for udp socket address :: port 88
oct. 30 14:20:55 kdc.jakobi.fr krb5kdc[10955](info): skipping unrecognized local address family 17
oct. 30 14:20:55 kdc.jakobi.fr krb5kdc[10955](info): skipping unrecognized local address family 17
krb5kdc: setsockopt(11,IPV6_V6ONLY,1) worked
oct. 30 14:20:55 kdc.jakobi.fr krb5kdc[10955](info): listening on fd 11: udp fe80::5054:ff:fe57:d89f%eth0.88
krb5kdc: setsockopt(12,IPV6_V6ONLY,1) worked
oct. 30 14:20:55 kdc.jakobi.fr krb5kdc[10955](info): listening on fd 13: tcp 0.0.0.0.88
oct. 30 14:20:55 kdc.jakobi.fr krb5kdc[10955](info): listening on fd 12: tcp ::.88
oct. 30 14:20:55 kdc.jakobi.fr krb5kdc[10955](info): set up 4 sockets
oct. 30 14:20:55 kdc.jakobi.fr krb5kdc[10956](info): commencing operation
oct. 30 14:36:58 kdc.jakobi.fr krb5kdc[10956](info): AS_REQ (6 etypes {18 17 16 23 25 26}) 192.168.1.4: NEEDED_PREAUTH: pascal@THALES.COM for krbtgt/THALES.COM@THALES.COM, Additional pre-authentication required
oct. 30 14:37:22 kdc.jakobi.fr krb5kdc[10956](info): AS_REQ (6 etypes {18 17 16 23 25 26}) 192.168.1.4: NEEDED_PREAUTH: pascal@THALES.COM for krbtgt/THALES.COM@THALES.COM, Additional pre-authentication required
oct. 30 14:38:01 kdc.jakobi.fr krb5kdc[10956](info): AS_REQ (6 etypes {18 17 16 23 25 26}) 192.168.1.4: NEEDED_PREAUTH: pascal@THALES.COM for krbtgt/THALES.COM@THALES.COM, Additional pre-authentication required
oct. 30 15:39:18 kdc.jakobi.fr krb5kdc[10956](info): AS_REQ (6 etypes {18 17 16 23 25 26}) 192.168.1.4: NEEDED_PREAUTH: pascal@THALES.COM for krbtgt/THALES.COM@THALES.COM, Additional pre-authentication required
oct. 30 16:32:41 kdc.jakobi.fr krb5kdc[10956](info): AS_REQ (6 etypes {18 17 16 23 25 26}) 192.168.1.4: NEEDED_PREAUTH: pascal@THALES.COM for krbtgt/THALES.COM@THALES.COM, Additional pre-authentication required
oct. 30 16:38:02 kdc.jakobi.fr krb5kdc[10956](info): AS_REQ (6 etypes {18 17 16 23 25 26}) 192.168.1.4: NEEDED_PREAUTH: pascal@THALES.COM for krbtgt/THALES.COM@THALES.COM, Additional pre-authentication required
oct. 30 18:34:37 kdc.jakobi.fr krb5kdc[10956](info): TGS_REQ (6 etypes {18 17 16 23 25 26}) 192.168.1.4: LOOKING_UP_SERVER: authtime 0, pascal@THALES.COM for host/videos.jakobi.fr@THALES.COM, Server not found in Kerberos database
oct. 30 18:34:38 kdc.jakobi.fr krb5kdc[10956](info): TGS_REQ (6 etypes {18 17 16 23 25 26}) 192.168.1.4: LOOKING_UP_SERVER: authtime 0, pascal@THALES.COM for host/videos.jakobi.fr@THALES.COM, Server not found in Kerberos database
oct. 30 18:34:38 kdc.jakobi.fr krb5kdc[10956](info): TGS_REQ (6 etypes {18 17 16 23 25 26}) 192.168.1.4: LOOKING_UP_SERVER: authtime 0, pascal@THALES.COM for host/videos.jakobi.fr@THALES.COM, Server not found in Kerberos database
oct. 30 18:34:38 kdc.jakobi.fr krb5kdc[10956](info): TGS_REQ (6 etypes {18 17 16 23 25 26}) 192.168.1.4: LOOKING_UP_SERVER: authtime 0, pascal@THALES.COM for host/videos.jakobi.fr@THALES.COM, Server not found in Kerberos database
oct. 30 18:34:38 kdc.jakobi.fr krb5kdc[10956](info): TGS_REQ (6 etypes {18 17 16 23 25 26}) 192.168.1.4: LOOKING_UP_SERVER: authtime 0, pascal@THALES.COM for host/videos.jakobi.fr@THALES.COM, Server not found in Kerberos database
oct. 30 18:34:38 kdc.jakobi.fr krb5kdc[10956](info): TGS_REQ (6 etypes {18 17 16 23 25 26}) 192.168.1.4: LOOKING_UP_SERVER: authtime 0, pascal@THALES.COM for host/videos.jakobi.fr@THALES.COM, Server not found in Kerberos database
oct. 30 19:41:15 kdc.jakobi.fr krb5kdc[10956](debug): Got signal to request exit
oct. 30 19:41:15 kdc.jakobi.fr krb5kdc[10956](info): closing down fd 12
oct. 30 19:41:15 kdc.jakobi.fr krb5kdc[10956](info): closing down fd 13
oct. 30 19:41:15 kdc.jakobi.fr krb5kdc[10956](info): closing down fd 11
oct. 30 19:41:15 kdc.jakobi.fr krb5kdc[10956](info): closing down fd 10
oct. 30 19:41:15 kdc.jakobi.fr krb5kdc[10956](info): shutting down
otp: Loaded
oct. 30 19:41:15 kdc.jakobi.fr krb5kdc[13352](Error): preauth pkinit failed to initialize: No realms configured correctly for pkinit support
oct. 30 19:41:15 kdc.jakobi.fr krb5kdc[13352](info): setting up network...
oct. 30 19:41:15 kdc.jakobi.fr krb5kdc[13352](info): listening on fd 10: udp 0.0.0.0.88 (pktinfo)
krb5kdc: setsockopt(11,IPV6_V6ONLY,1) worked
krb5kdc: Argument invalide - Cannot request packet info for udp socket address :: port 88
oct. 30 19:41:15 kdc.jakobi.fr krb5kdc[13352](info): skipping unrecognized local address family 17
oct. 30 19:41:15 kdc.jakobi.fr krb5kdc[13352](info): skipping unrecognized local address family 17
krb5kdc: setsockopt(11,IPV6_V6ONLY,1) worked
oct. 30 19:41:15 kdc.jakobi.fr krb5kdc[13352](info): listening on fd 11: udp fe80::5054:ff:fe57:d89f%eth0.88
krb5kdc: setsockopt(12,IPV6_V6ONLY,1) worked
oct. 30 19:41:15 kdc.jakobi.fr krb5kdc[13352](info): listening on fd 13: tcp 0.0.0.0.88
oct. 30 19:41:15 kdc.jakobi.fr krb5kdc[13352](info): listening on fd 12: tcp ::.88
oct. 30 19:41:15 kdc.jakobi.fr krb5kdc[13352](info): set up 4 sockets
oct. 30 19:41:15 kdc.jakobi.fr krb5kdc[13353](info): commencing operation
oct. 30 19:42:15 kdc.jakobi.fr krb5kdc[13353](info): AS_REQ (6 etypes {18 17 16 23 25 26}) 192.168.1.4: NEEDED_PREAUTH: pascal@THALES.COM for krbtgt/THALES.COM@THALES.COM, Additional pre-authentication required
oct. 30 19:42:34 kdc.jakobi.fr krb5kdc[13353](info): AS_REQ (6 etypes {18 17 16 23 25 26}) 192.168.1.4: NEEDED_PREAUTH: pascal@THALES.COM for krbtgt/THALES.COM@THALES.COM, Additional pre-authentication required
oct. 30 20:44:39 kdc.jakobi.fr krb5kdc[13353](info): AS_REQ (6 etypes {18 17 16 23 25 26}) 192.168.1.4: NEEDED_PREAUTH: pascal@THALES.COM for krbtgt/THALES.COM@THALES.COM, Additional pre-authentication required
oct. 30 22:47:29 kdc.jakobi.fr krb5kdc[13353](info): AS_REQ (6 etypes {18 17 16 23 25 26}) 192.168.1.4: ISSUE: authtime 1446241649, etypes {rep=18 tkt=18 ses=18}, toto@THALES.COM for krbtgt/THALES.COM@THALES.COM
oct. 30 22:48:29 kdc.jakobi.fr krb5kdc[13353](info): AS_REQ (6 etypes {18 17 16 23 25 26}) 192.168.1.4: NEEDED_PREAUTH: toto@THALES.COM for krbtgt/THALES.COM@THALES.COM, Additional pre-authentication required
oct. 31 08:45:09 kdc.jakobi.fr krb5kdc[13353](debug): Got signal to request exit
oct. 31 08:45:09 kdc.jakobi.fr krb5kdc[13353](info): closing down fd 12
oct. 31 08:45:09 kdc.jakobi.fr krb5kdc[13353](info): closing down fd 13
oct. 31 08:45:09 kdc.jakobi.fr krb5kdc[13353](info): closing down fd 11
oct. 31 08:45:09 kdc.jakobi.fr krb5kdc[13353](info): closing down fd 10
oct. 31 08:45:09 kdc.jakobi.fr krb5kdc[13353](info): shutting down
otp: Loaded
oct. 31 08:45:09 kdc.jakobi.fr krb5kdc[19027](Error): preauth pkinit failed to initialize: No realms configured correctly for pkinit support
oct. 31 08:45:09 kdc.jakobi.fr krb5kdc[19027](info): setting up network...
oct. 31 08:45:09 kdc.jakobi.fr krb5kdc[19027](info): listening on fd 10: udp 0.0.0.0.88 (pktinfo)
krb5kdc: setsockopt(11,IPV6_V6ONLY,1) worked
krb5kdc: Argument invalide - Cannot request packet info for udp socket address :: port 88
oct. 31 08:45:09 kdc.jakobi.fr krb5kdc[19027](info): skipping unrecognized local address family 17
oct. 31 08:45:09 kdc.jakobi.fr krb5kdc[19027](info): skipping unrecognized local address family 17
krb5kdc: setsockopt(11,IPV6_V6ONLY,1) worked
oct. 31 08:45:09 kdc.jakobi.fr krb5kdc[19027](info): listening on fd 11: udp fe80::5054:ff:fe57:d89f%eth0.88
krb5kdc: setsockopt(12,IPV6_V6ONLY,1) worked
oct. 31 08:45:09 kdc.jakobi.fr krb5kdc[19027](info): listening on fd 13: tcp 0.0.0.0.88
oct. 31 08:45:09 kdc.jakobi.fr krb5kdc[19027](info): listening on fd 12: tcp ::.88
oct. 31 08:45:09 kdc.jakobi.fr krb5kdc[19027](info): set up 4 sockets
oct. 31 08:45:09 kdc.jakobi.fr krb5kdc[19028](info): commencing operation
oct. 31 08:45:26 kdc.jakobi.fr krb5kdc[19028](info): AS_REQ (6 etypes {18 17 16 23 25 26}) 192.168.1.4: NEEDED_PREAUTH: pascal@THALES.COM for krbtgt/THALES.COM@THALES.COM, Additional pre-authentication required
oct. 31 08:46:12 kdc.jakobi.fr krb5kdc[19028](info): AS_REQ (6 etypes {18 17 16 23 25 26}) 192.168.1.4: NEEDED_PREAUTH: toto@THALES.COM for krbtgt/THALES.COM@THALES.COM, Additional pre-authentication required
oct. 31 08:47:59 kdc.jakobi.fr krb5kdc[19028](info): AS_REQ (6 etypes {18 17 16 23 25 26}) 192.168.1.4: NEEDED_PREAUTH: pascal@THALES.COM for krbtgt/THALES.COM@THALES.COM, Additional pre-authentication required
oct. 31 08:50:56 kdc.jakobi.fr krb5kdc[19028](info): AS_REQ (6 etypes {18 17 16 23 25 26}) 192.168.1.4: NEEDED_PREAUTH: pascal@THALES.COM for krbtgt/THALES.COM@THALES.COM, Additional pre-authentication required
oct. 31 08:51:54 kdc.jakobi.fr krb5kdc[19028](info): AS_REQ (6 etypes {18 17 16 23 25 26}) 192.168.1.4: NEEDED_PREAUTH: pascal@THALES.COM for krbtgt/THALES.COM@THALES.COM, Additional pre-authentication required
oct. 31 12:13:33 kdc.jakobi.fr krb5kdc[19028](info): AS_REQ (6 etypes {18 17 16 23 25 26}) 192.168.1.4: NEEDED_PREAUTH: pascal@THALES.COM for krbtgt/THALES.COM@THALES.COM, Additional pre-authentication required
oct. 31 12:14:03 kdc.jakobi.fr krb5kdc[19028](info): AS_REQ (6 etypes {18 17 16 23 25 26}) 192.168.1.4: NEEDED_PREAUTH: pascal@THALES.COM for krbtgt/THALES.COM@THALES.COM, Additional pre-authentication required
oct. 31 12:16:02 kdc.jakobi.fr krb5kdc[19028](info): AS_REQ (6 etypes {18 17 16 23 25 26}) 192.168.1.4: NEEDED_PREAUTH: pascal@THALES.COM for krbtgt/THALES.COM@THALES.COM, Additional pre-authentication required
oct. 31 13:05:30 kdc.jakobi.fr krb5kdc[19028](info): AS_REQ (6 etypes {18 17 16 23 25 26}) 192.168.1.4: NEEDED_PREAUTH: pascal@THALES.COM for krbtgt/THALES.COM@THALES.COM, Additional pre-authentication required
oct. 31 13:06:12 kdc.jakobi.fr krb5kdc[19028](info): AS_REQ (6 etypes {18 17 16 23 25 26}) 192.168.1.4: NEEDED_PREAUTH: pascal@THALES.COM for krbtgt/THALES.COM@THALES.COM, Additional pre-authentication required
oct. 31 13:15:07 kdc.jakobi.fr krb5kdc[19028](debug): Got signal to request exit
oct. 31 13:15:07 kdc.jakobi.fr krb5kdc[19028](info): closing down fd 12
oct. 31 13:15:07 kdc.jakobi.fr krb5kdc[19028](info): closing down fd 13
oct. 31 13:15:07 kdc.jakobi.fr krb5kdc[19028](info): closing down fd 11
oct. 31 13:15:07 kdc.jakobi.fr krb5kdc[19028](info): closing down fd 10
oct. 31 13:15:07 kdc.jakobi.fr krb5kdc[19028](info): shutting down
otp: Loaded
oct. 31 13:15:30 kdc.jakobi.fr krb5kdc[887](Error): preauth pkinit failed to initialize: No realms configured correctly for pkinit support
oct. 31 13:15:30 kdc.jakobi.fr krb5kdc[887](info): setting up network...
oct. 31 13:15:30 kdc.jakobi.fr krb5kdc[887](info): listening on fd 9: udp 0.0.0.0.88 (pktinfo)
krb5kdc: setsockopt(10,IPV6_V6ONLY,1) worked
krb5kdc: Argument invalide - Cannot request packet info for udp socket address :: port 88
oct. 31 13:15:30 kdc.jakobi.fr krb5kdc[887](info): skipping unrecognized local address family 17
oct. 31 13:15:30 kdc.jakobi.fr krb5kdc[887](info): skipping unrecognized local address family 17
krb5kdc: setsockopt(10,IPV6_V6ONLY,1) worked
oct. 31 13:15:30 kdc.jakobi.fr krb5kdc[887](info): listening on fd 10: udp fe80::5054:ff:fe57:d89f%eth0.88
krb5kdc: setsockopt(11,IPV6_V6ONLY,1) worked
oct. 31 13:15:30 kdc.jakobi.fr krb5kdc[887](info): listening on fd 12: tcp 0.0.0.0.88
oct. 31 13:15:30 kdc.jakobi.fr krb5kdc[887](info): listening on fd 11: tcp ::.88
oct. 31 13:15:30 kdc.jakobi.fr krb5kdc[887](info): set up 4 sockets
oct. 31 13:15:30 kdc.jakobi.fr krb5kdc[1016](info): commencing operation
oct. 31 13:15:39 kdc.jakobi.fr krb5kdc[1016](info): closing down fd 13
oct. 31 14:36:46 kdc.jakobi.fr krb5kdc[1016](debug): Got signal to request exit
oct. 31 14:36:46 kdc.jakobi.fr krb5kdc[1016](info): closing down fd 11
oct. 31 14:36:46 kdc.jakobi.fr krb5kdc[1016](info): closing down fd 12
oct. 31 14:36:46 kdc.jakobi.fr krb5kdc[1016](info): closing down fd 10
oct. 31 14:36:46 kdc.jakobi.fr krb5kdc[1016](info): closing down fd 9
oct. 31 14:36:46 kdc.jakobi.fr krb5kdc[1016](info): shutting down
otp: Loaded
oct. 31 14:37:02 kdc.jakobi.fr krb5kdc[886](Error): preauth pkinit failed to initialize: No realms configured correctly for pkinit support
oct. 31 14:37:02 kdc.jakobi.fr krb5kdc[886](info): setting up network...
oct. 31 14:37:02 kdc.jakobi.fr krb5kdc[886](info): listening on fd 9: udp 0.0.0.0.88 (pktinfo)
krb5kdc: setsockopt(10,IPV6_V6ONLY,1) worked
krb5kdc: Argument invalide - Cannot request packet info for udp socket address :: port 88
oct. 31 14:37:02 kdc.jakobi.fr krb5kdc[886](info): skipping unrecognized local address family 17
oct. 31 14:37:02 kdc.jakobi.fr krb5kdc[886](info): skipping unrecognized local address family 17
krb5kdc: setsockopt(10,IPV6_V6ONLY,1) worked
oct. 31 14:37:02 kdc.jakobi.fr krb5kdc[886](info): listening on fd 10: udp fe80::5054:ff:fe57:d89f%eth0.88
krb5kdc: setsockopt(11,IPV6_V6ONLY,1) worked
oct. 31 14:37:02 kdc.jakobi.fr krb5kdc[886](info): listening on fd 12: tcp 0.0.0.0.88
oct. 31 14:37:02 kdc.jakobi.fr krb5kdc[886](info): listening on fd 11: tcp ::.88
oct. 31 14:37:02 kdc.jakobi.fr krb5kdc[886](info): set up 4 sockets
oct. 31 14:37:02 kdc.jakobi.fr krb5kdc[904](info): commencing operation
oct. 31 14:42:14 kdc.jakobi.fr krb5kdc[904](info): AS_REQ (6 etypes {18 17 16 23 25 26}) 192.168.1.4: CLIENT_NOT_FOUND: /etc/pki/krb5/private/pascal_key.pem@THALES.COM for krbtgt/THALES.COM@THALES.COM, Client not found in Kerberos database
oct. 31 14:44:46 kdc.jakobi.fr krb5kdc[904](info): AS_REQ (6 etypes {18 17 16 23 25 26}) 192.168.1.4: NEEDED_PREAUTH: pascal@THALES.COM for krbtgt/THALES.COM@THALES.COM, Additional pre-authentication required
oct. 31 14:45:15 kdc.jakobi.fr krb5kdc[904](info): AS_REQ (6 etypes {18 17 16 23 25 26}) 192.168.1.4: NEEDED_PREAUTH: pascal@THALES.COM for krbtgt/THALES.COM@THALES.COM, Additional pre-authentication required
oct. 31 14:47:34 kdc.jakobi.fr krb5kdc[904](info): AS_REQ (6 etypes {18 17 16 23 25 26}) 192.168.1.34: ISSUE: authtime 1446299254, etypes {rep=18 tkt=18 ses=18}, root/admin@THALES.COM for kadmin/kdc.jakobi.fr@THALES.COM
oct. 31 14:50:58 kdc.jakobi.fr krb5kdc[904](debug): Got signal to request exit
oct. 31 14:50:58 kdc.jakobi.fr krb5kdc[904](info): closing down fd 11
oct. 31 14:50:58 kdc.jakobi.fr krb5kdc[904](info): closing down fd 12
oct. 31 14:50:58 kdc.jakobi.fr krb5kdc[904](info): closing down fd 10
oct. 31 14:50:58 kdc.jakobi.fr krb5kdc[904](info): closing down fd 9
oct. 31 14:50:58 kdc.jakobi.fr krb5kdc[904](info): shutting down
otp: Loaded
oct. 31 14:51:13 kdc.jakobi.fr krb5kdc[887](Error): preauth pkinit failed to initialize: No realms configured correctly for pkinit support
oct. 31 14:51:13 kdc.jakobi.fr krb5kdc[887](info): setting up network...
oct. 31 14:51:13 kdc.jakobi.fr krb5kdc[887](info): listening on fd 9: udp 0.0.0.0.88 (pktinfo)
krb5kdc: setsockopt(10,IPV6_V6ONLY,1) worked
krb5kdc: Argument invalide - Cannot request packet info for udp socket address :: port 88
oct. 31 14:51:13 kdc.jakobi.fr krb5kdc[887](info): skipping unrecognized local address family 17
oct. 31 14:51:13 kdc.jakobi.fr krb5kdc[887](info): skipping unrecognized local address family 17
krb5kdc: setsockopt(10,IPV6_V6ONLY,1) worked
oct. 31 14:51:13 kdc.jakobi.fr krb5kdc[887](info): listening on fd 10: udp fe80::5054:ff:fe57:d89f%eth0.88
krb5kdc: setsockopt(11,IPV6_V6ONLY,1) worked
oct. 31 14:51:13 kdc.jakobi.fr krb5kdc[887](info): listening on fd 12: tcp 0.0.0.0.88
oct. 31 14:51:13 kdc.jakobi.fr krb5kdc[887](info): listening on fd 11: tcp ::.88
oct. 31 14:51:13 kdc.jakobi.fr krb5kdc[887](info): set up 4 sockets
oct. 31 14:51:13 kdc.jakobi.fr krb5kdc[907](info): commencing operation
oct. 31 14:52:42 kdc.jakobi.fr krb5kdc[907](info): AS_REQ (6 etypes {18 17 16 23 25 26}) 192.168.1.4: NEEDED_PREAUTH: pascal@THALES.COM for krbtgt/THALES.COM@THALES.COM, Additional pre-authentication required
oct. 31 14:58:53 kdc.jakobi.fr krb5kdc[907](info): AS_REQ (6 etypes {18 17 16 23 25 26}) 192.168.1.4: NEEDED_PREAUTH: pascal@THALES.COM for krbtgt/THALES.COM@THALES.COM, Additional pre-authentication required
oct. 31 16:51:15 kdc.jakobi.fr krb5kdc[907](debug): Got signal to request exit
oct. 31 16:51:15 kdc.jakobi.fr krb5kdc[907](info): closing down fd 11
oct. 31 16:51:15 kdc.jakobi.fr krb5kdc[907](info): closing down fd 12
oct. 31 16:51:15 kdc.jakobi.fr krb5kdc[907](info): closing down fd 10
oct. 31 16:51:15 kdc.jakobi.fr krb5kdc[907](info): closing down fd 9
oct. 31 16:51:15 kdc.jakobi.fr krb5kdc[907](info): shutting down
otp: Loaded
oct. 31 16:51:31 kdc.jakobi.fr krb5kdc[883](Error): preauth pkinit failed to initialize: No realms configured correctly for pkinit support
oct. 31 16:51:31 kdc.jakobi.fr krb5kdc[883](info): setting up network...
oct. 31 16:51:31 kdc.jakobi.fr krb5kdc[883](info): listening on fd 9: udp 0.0.0.0.88 (pktinfo)
krb5kdc: setsockopt(10,IPV6_V6ONLY,1) worked
krb5kdc: Argument invalide - Cannot request packet info for udp socket address :: port 88
oct. 31 16:51:31 kdc.jakobi.fr krb5kdc[883](info): skipping unrecognized local address family 17
oct. 31 16:51:31 kdc.jakobi.fr krb5kdc[883](info): skipping unrecognized local address family 17
krb5kdc: setsockopt(10,IPV6_V6ONLY,1) worked
oct. 31 16:51:31 kdc.jakobi.fr krb5kdc[883](info): listening on fd 10: udp fe80::5054:ff:fe57:d89f%eth0.88
krb5kdc: setsockopt(11,IPV6_V6ONLY,1) worked
oct. 31 16:51:31 kdc.jakobi.fr krb5kdc[883](info): listening on fd 12: tcp 0.0.0.0.88
oct. 31 16:51:31 kdc.jakobi.fr krb5kdc[883](info): listening on fd 11: tcp ::.88
oct. 31 16:51:31 kdc.jakobi.fr krb5kdc[883](info): set up 4 sockets
oct. 31 16:51:31 kdc.jakobi.fr krb5kdc[894](info): commencing operation
oct. 31 16:52:37 kdc.jakobi.fr krb5kdc[894](info): AS_REQ (6 etypes {18 17 16 23 25 26}) 192.168.1.4: NEEDED_PREAUTH: pascal@THALES.COM for krbtgt/THALES.COM@THALES.COM, Additional pre-authentication required
oct. 31 16:52:53 kdc.jakobi.fr krb5kdc[894](debug): Got signal to request exit
oct. 31 16:52:53 kdc.jakobi.fr krb5kdc[894](info): closing down fd 11
oct. 31 16:52:53 kdc.jakobi.fr krb5kdc[894](info): closing down fd 12
oct. 31 16:52:53 kdc.jakobi.fr krb5kdc[894](info): closing down fd 10
oct. 31 16:52:53 kdc.jakobi.fr krb5kdc[894](info): closing down fd 9
oct. 31 16:52:53 kdc.jakobi.fr krb5kdc[894](info): shutting down
otp: Loaded
oct. 31 16:53:09 kdc.jakobi.fr krb5kdc[887](Error): preauth pkinit failed to initialize: No realms configured correctly for pkinit support
oct. 31 16:53:09 kdc.jakobi.fr krb5kdc[887](info): setting up network...
oct. 31 16:53:09 kdc.jakobi.fr krb5kdc[887](info): listening on fd 9: udp 0.0.0.0.88 (pktinfo)
krb5kdc: setsockopt(10,IPV6_V6ONLY,1) worked
krb5kdc: Argument invalide - Cannot request packet info for udp socket address :: port 88
oct. 31 16:53:09 kdc.jakobi.fr krb5kdc[887](info): skipping unrecognized local address family 17
oct. 31 16:53:09 kdc.jakobi.fr krb5kdc[887](info): skipping unrecognized local address family 17
krb5kdc: setsockopt(10,IPV6_V6ONLY,1) worked
oct. 31 16:53:09 kdc.jakobi.fr krb5kdc[887](info): listening on fd 10: udp fe80::5054:ff:fe57:d89f%eth0.88
krb5kdc: setsockopt(11,IPV6_V6ONLY,1) worked
oct. 31 16:53:09 kdc.jakobi.fr krb5kdc[887](info): listening on fd 12: tcp 0.0.0.0.88
oct. 31 16:53:09 kdc.jakobi.fr krb5kdc[887](info): listening on fd 11: tcp ::.88
oct. 31 16:53:09 kdc.jakobi.fr krb5kdc[887](info): set up 4 sockets
oct. 31 16:53:09 kdc.jakobi.fr krb5kdc[903](info): commencing operation
oct. 31 16:53:43 kdc.jakobi.fr krb5kdc[903](info): AS_REQ (6 etypes {18 17 16 23 25 26}) 192.168.1.4: NEEDED_PREAUTH: pascal@THALES.COM for krbtgt/THALES.COM@THALES.COM, Additional pre-authentication required
oct. 31 16:53:52 kdc.jakobi.fr krb5kdc[903](info): AS_REQ (6 etypes {18 17 16 23 25 26}) 192.168.1.4: NEEDED_PREAUTH: pascal@THALES.COM for krbtgt/THALES.COM@THALES.COM, Additional pre-authentication required
--------------070107080601060503020208
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
_______________________________________________
krbdev mailing list krbdev@mit.edu
https://mailman.mit.edu/mailman/listinfo/krbdev
--------------070107080601060503020208--
