Re: Error: expected ADAT in reply. got: 431 Security resourceunavailable

[Martin MOKREJŠ <mmokrejs@natur.cuni.cz>]

On Thu, 18 Sep 2003, Love wrote:

>
> Martin MOKREJ? <mmokrejs@natur.cuni.cz> writes:
>
> > Hi,
> >   what's this error? ;)
> [...]
> > serow# ftp serow
> > Connected to serow.gsf.de.
> > 220 serow.gsf.de FTP server (Version 6.00+Heimdal 20030916) ready.
> > Trying GSSAPI...
> > Error: expected ADAT in reply. got: 431 Security resource unavailable
>
> Do you have a ftp/serow.gsf.de in the database ? Try add that to the keytab
> (or remove it from the database).

serow# ktutil list
FILE:/etc/krb5.keytab:

Vno  Type           Principal
  1  des-cbc-crc    host/serow.gsf.de@GSF.DE
  1  des-cbc-md4    host/serow.gsf.de@GSF.DE
  1  des-cbc-md5    host/serow.gsf.de@GSF.DE
  1  des3-cbc-sha1  host/serow.gsf.de@GSF.DE

krb4:/etc/srvtab:

Vno  Type         Principal
  1  des-cbc-md5  host/serow.gsf.de@GSF.DE
  1  des-cbc-md4  host/serow.gsf.de@GSF.DE
  1  des-cbc-crc  host/serow.gsf.de@GSF.DE
serow#

kadmin> get ftp/serow.gsf.de
               Principal: ftp/serow.gsf.de@GSF.DE
       Principal expires: never
        Password expires: never
    Last password change: never
         Max ticket life: 1 day
      Max renewable life: 1 week
                    Kvno: 2
                   Mkvno: 0
                  Policy: none
   Last successful login: never
       Last failed login: never
      Failed login count: 0
           Last modified: 2002-12-08 01:38:18 UTC
                Modifier: mokrejs/admin@GSF.DE
              Attributes:
Keytypes(salttype[(salt-value)]): des-cbc-md5(pw-salt()), des-cbc-md4(pw-salt()), des-cbc-crc(pw-salt())

kadmin>


kadmin> ext ftp/serow.gsf.de
kadmin> quit
serow# ktutil list
FILE:/etc/krb5.keytab:

Vno  Type           Principal
  1  des-cbc-crc    host/serow.gsf.de@GSF.DE
  1  des-cbc-md4    host/serow.gsf.de@GSF.DE
  1  des-cbc-md5    host/serow.gsf.de@GSF.DE
  1  des3-cbc-sha1  host/serow.gsf.de@GSF.DE
  2  des-cbc-md5    ftp/serow.gsf.de@GSF.DE
  2  des-cbc-md4    ftp/serow.gsf.de@GSF.DE
  2  des-cbc-crc    ftp/serow.gsf.de@GSF.DE

krb4:/etc/srvtab:

Vno  Type         Principal
  1  des-cbc-md5  host/serow.gsf.de@GSF.DE
  1  des-cbc-md4  host/serow.gsf.de@GSF.DE
  1  des-cbc-crc  host/serow.gsf.de@GSF.DE
  2  des-cbc-md5  ftp/serow.gsf.de@GSF.DE
  2  des-cbc-md4  ftp/serow.gsf.de@GSF.DE
  2  des-cbc-crc  ftp/serow.gsf.de@GSF.DE
serow# ftp serow
Connected to serow.gsf.de.
220 serow.gsf.de FTP server (Version 6.00+Heimdal 20030916) ready.
Trying GSSAPI...
Authenticated to <ftp/serow.gsf.de@GSF.DE>
Authentication successful.

Name (serow:root): mokrejs
S:232-Compaq Tru64 UNIX V5.1A (Rev. 1885); Fri Dec  6 18:07:50 MET 2002
[...]


Yes, adding it to keytab helped. Thanks!

If I should test for isolating the problems removing it from database,
let me know.
-- 
Martin Mokrejs <mmokrejs@natur.cuni.cz>, <m.mokrejs@gsf.de>
PGP5.0i key is at http://www.natur.cuni.cz/~mmokrejs
MIPS / Institute for Bioinformatics <http://mips.gsf.de>
GSF - National Research Center for Environment and Health
Ingolstaedter Landstrasse 1, D-85764 Neuherberg, Germany
tel.: +49-89-3187 3683 , fax: +49-89-3187 3585