Thanks Greg, I figured it out after a while. I am noob in Linux :) I was using the wrong command to open ports through the firewall. When I opened port 88 and 749 (with the right command this time) it worked correctly.
I have another questions I will create a new thread Thanks > Date: Sun, 18 Jan 2015 12:32:42 -0500 > From: ghud...@mit.edu > To: zara...@live.com; kerberos@mit.edu > Subject: Re: Cannot contact any KDC for real 'TR.LAB' while getting initial > credentials > > I don't think your image attachments made it through the mailing list > server. > > Single-component KDC hostnames should not cause a problem as long as the > client can resolve them. If you are using an MIT krb5 client, the best > way to get more insight is to use "env KRB5_TRACE=filename kinit ..." > and look at the file for messages like: > > Resolving hostname equal-rites.mit.edu > Sending initial UDP request to dgram 127.0.1.1:61000 > > On 01/17/2015 01:06 AM, Zaid Arafeh wrote: > > Hello, > > I'd like your help please > > BackgroundI stood up a test Kerberos KDC with hostname kdc, I can get > > tickets locally on the kdc itself and I can run kadmin successfully. > > firewall is disabled on KDCI stood up a host named CLI, I sync'ed the > > krb5.conf from the KDC. I added the IP address for kdc in the /etc/hosts > > file and /etc/resolv.conf and I am able to ping the KDC > > ProblemWhen I run kinit or kadmin on the client, I get the following error > > "Cannot contact any KDC for real 'TR.LAB' while getting initial > > credentials"I tried this from multiple hosts that have krb5.conf sync'ed > > same problem > > here are snaptshots of my config (question follows) > > > > > > > > > > Could the fact that Im running single label hosts (not FQDN) be the > > cause?What could be the problem if Im able to reach the KDC by all other > > means (SCP, Ping etc) > > > > > > > > > > > > ________________________________________________ > > Kerberos mailing list Kerberos@mit.edu > > https://mailman.mit.edu/mailman/listinfo/kerberos > > ________________________________________________ Kerberos mailing list Kerberos@mit.edu https://mailman.mit.edu/mailman/listinfo/kerberos
