[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
newbie problem initializing realm with ldap backend
hi, i'm following http://www.openinput.com/auth-howto/index.html
skipping posix Accounts and Groups creation (for now).
but:
kadmin> init CONOSURSEGUROS.CL
Realm max ticket life [unlimited]:
Realm max renewable ticket life [unlimited]:
kadmin: kadm5_create_principal: ldap_add_s: default@conosurseguros.cl
(dn=cn=default@conosurseguros.cl,ou=kerberos,dc=conosurseguros,dc=cl)
Invalid syntax
after hours of reading and re-doing everything from zero i keep getting
this syntax error.... how can i know where is it? _please_
i created that ou= using:
# Kerberos only principals (admin accounts, hosts,...)
dn: ou=kerberos,dc=conosurseguros,dc=cl
objectClass: organizationalUnit
objectClass: top
ou: kerberos
description: Kerberos only principals
krb5-kdc.schema from:
http://www.stanford.edu/services/directory/openldap/configuration/krb5-kdc.schema
and my krb5.conf is:
[libdefaults]
ticket_lifetime = 600
default_realm = CONOSURSEGUROS.CL
default_etypes = des3-hmac-sha1 des-cbc-crc des-cbc-md5
default_etypes_des = des3-hmac-sha1 des-cbc-crc des-cbc-md5
[realms]
CONOSURSEGUROS.CL = {
kdc = kerberos.conosur.0:88
admin_server = kerberos.conosur.0:749
}
[domain_realm]
.conosur.0 = CONOSURSEGUROS.CL
conosur.0 = CONOSURSEGUROS.cl
[kdc]
database = {
realm = CONOSURSEGUROS.CL
dbname = ldap:ou=kerberos,dc=conosurseguros,dc=cl
mkey_file = /var/heimdal/m-key
}
[logging]
kdc = FILE:/var/heimdal/logs/kdc.log
admin_server = FILE:/var/heimdal/logs/admin.log
default = FILE:/var/heimdal/logs/heimdal.log
Thanks in advance,
Alejandro Mery