> I'll play around a little more and report back.

Still the same.  This is what I see on the master...

Nov 02 15:23:29 cardus.our.realm kadmind[25047](Notice):     Cannot decrypt 
ticket for kiprop/cardus.our.realm@OUR.REALM using keytab key for 
kadmin/chang...@test.our.REALM

cardus.our.realm is the master - it's a client of OUR.REALM but is a master KDC
for TEST.OUR.REALM

The kiprop principals have to be in OUR.REALM, not TEST.OUR.REALM

Cheers
Toby


-- 
The University of Edinburgh is a charitable body, registered in
Scotland, with registration number SC005336.


________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

Reply via email to