Hi all, I'm setting up kerberos on a bunch of RedHat 6.2 servers ,and one 
RedHat 7 client.

Following the /usr/share/doc/krb* documentation I got the Kerberos server 
up and running, and can kinit and grab tickets via a client on another 
machine: 

$ klist
Ticket cache: FILE:/tmp/krb5cc_500
Default principal: [EMAIL PROTECTED]
 
Valid starting     Expires            Service principal
11/16/00 11:24:40  11/16/00 21:24:40  [EMAIL PROTECTED]
 
 
Kerberos 4 ticket cache: /tmp/tkt500
Principal: [EMAIL PROTECTED]
 
  Issued              Expires             Principal
11/16/00 11:24:40  11/16/00 21:24:40  [EMAIL PROTECTED]

So you can see it works.  After that the documentation seems to go south, 
I can't figure out how to actually attempt to USE kerberos on these 
machines.  FTP'ing to the kerberos server doesn't let me in via Kerberos:

GSSAPI accepted as authentication type
GSSAPI error major: Miscellaneous failure
GSSAPI error minor: Server not found in Kerberos database
GSSAPI error: initializing context
GSSAPI authentication failed          

I understand the "Server not found in Kerberos database" but I don't know 
how to ADD it!  What do I do?  I've changed all the /etc/inetd.conf 
entries into the "kerberized" versions (ftp, telnet, klogin)  that exist 
in /usr/kerberos/sbin.  I get the same error message for most of the 
servers.

With rsh I get:

error getting credentials: Server not found in Kerberos database
krb_sendauth failed: Can't send request (send_to_kdc)  

I'm not sure what the "Can't send request (send_to_kdc)" is.  I can get my 
tickets just fine with kinit, so I CAN get to the kdc.  I'm sure I'm 
missing some simple step, but can't find good docs to help me!  Any ideas?

Matt



_______________________________________________
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list

Reply via email to