[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Cannot contact any KDC for requested realm



Hi All

I am new to heimdal kerberos, i am facing problem with heimdal 0.6.1rc3-55.24, and i am not able to
track where i have done mistake.

My database is here
--------------------

SuSE:/var/heimdal # ls
.  ..  heimdal.db  kadmind.acl  log  m-key
SuSE:/var/heimdal #

My kdc.conf
-------------

[libdefaults]
                                                                #       default_realm = MY.REALM
        clockskew = 300
        default_realm = SUSE.DE

[realms]
SUSE.DE = {
        kdc = suse.idc.oracle.com
        default_domain = suse.de
        kpasswd_server = suse.idc.oracle.com
}
[domain_realm]
        .suse.de = SUSE.DE
#       .my.domain = MY.REALM

[logging]
        default = SYSLOG:NOTICE:DAEMON
        kdc = FILE:/var/log/kdc.log
        kadmind = FILE:/var/log/kadmind.log

[appdefaults]
pam = {
        ticket_lifetime = 1d
        renew_lifetime = 1d
        forwardable = true
        proxiable = false
        retain_after_close = false
        minimum_uid = 0
        debug = false
}
SuSE:~ #


My principles
-------------
SuSE:~ # kadmin -l
kadmin> list *
  default@SUSE.DE
  root/admin@SUSE.DE ----------------> This is what i added as my administrator principle
  kadmin/admin@SUSE.DE
  kadmin/hprop@SUSE.DE
  krbtgt/SUSE.DE@SUSE.DE
  kadmin/changepw@SUSE.DE
  changepw/kerberos@SUSE.DE
kadmin>


My ACL
------

SuSE:/var/heimdal # cat kadmind.acl
root/admin      all     *
SuSE:/var/heimdal #


Got a ticket
-------------

SuSE:~ # kinit root/admin
root/admin@SUSE.DE's Password:
kinit: NOTICE: ticket renewable lifetime is 1 week
SuSE:~ # klist -a
Credentials cache: FILE:/tmp/krb5cc_0
        Principal: root/admin@SUSE.DE
    Cache version: 4

Server: krbtgt/SUSE.DE@SUSE.DE
Ticket etype: des3-cbc-sha1, kvno 1
Auth time:  Dec 12 13:31:57 2006
End time:   Dec 12 23:31:57 2006
Renew till: Dec 19 13:31:57 2006
Ticket flags: renewable, initial
Addresses: IPv4:152.69.168.146

SuSE:~ #



My problem
-----------
SuSE:~ # kadmin
kadmin: kadm5_init_with_password: Cannot contact any KDC for requested realm
SuSE:~ #



Please , anyone one can tell where i have done mistake , what is the problem here ? . I am try to
solve this problem from the past two days , but no help from google.

Another problem is, log files keep on complaining about "/var/heimdal/kdc.conf:0: cannot open file"
, what is the value of this file ? what i need to define in this file ?


Thanks & Regards,
Shashi Kanth