Problems with Kerberos and realms

Thread Tools Search this Thread
Operating Systems AIX Problems with Kerberos and realms
# 8  
Old 10-24-2013

When you use telnet you run
telnet 88

Tell me the output of this

Also, I am seeing that the

syntax is not correctly followed, I specifically mentioned use caps for ONLY '-r' flag and also '-D' is missing.

Make sure you unconfigure 1st.

Also, play around, after you run the above configuration, if it still gives you error try the below
mkuser -R KRB5Afiles registry= KRB5Afiles SYSTEM= KRB5Afiles PassLine

Then try
kinit PassLine

I have no kerberos in my environment to check the different scenarios.

Let me know what it comes up with.
# 9  
Old 10-24-2013
I was able to successfully telnet via 88.

About the command syntax - some docs have used mkkrb5clnt, and others have used config.krb5 (the IBM doc you linked, for example, uses config.krb5.) Is there a reason to use one over the other?

I'll go ahead and unconfigure the current settings and rebuild it, but if I should be starting with one vs the other, it'd be helpful to understand why.

---------- Post updated at 01:39 PM ---------- Previous update was at 01:32 PM ----------

Also, because it may be helpful, this is what the AD admin ran on their end -

ktpass -princ host/ -mapuser testunix -pass password -kvno 3 -out C:\some\folder\testunix.keytab

That's the keytab I merged with krb5.keytab. It appears, from the IBM doc, that ptype is missing. I don't know that they ran the ktpass.exe within the domain, but I can verify this.
# 10  
Old 10-24-2013
Keep it simple, just follow the IBM doc, make sure you are following the proper syntax. Since you are just configuring Kerberos.

My Kerberos configuration was integrated with LDAP, it was so complex setup.

Just unconfigure and follow IBM steps.
# 11  
Old 10-24-2013
Will do. I'm trying to arrange some time with the AD admin, because I'd like to create a new keytab and everything. Basically walk through the entire doc from a fresh perspective, because I'm tired of beating my head against a wall here Smilie
# 12  
Old 10-24-2013
I know how it feel like!

Also, look at the system logs, what error it is throwing.
/etc/syslog.conf, is the file to find out the location of log files.

Open a new terminal and run
tail -f <log file>

to view live logs.

Let me know what you finds out.
Login or Register to Ask a Question

Previous Thread | Next Thread

9 More Discussions You Might Find Interesting

1. Shell Programming and Scripting

PERL and Kerberos authentication

I am installing Authen::Krb5::Easy and during make test I am getting the follwing error : kinit not ok 2 error was: could not get initial credentials: Cannot contact any KDC for requested realm we are stroring krb5.conf in diff location ( not in /etc/krb5.conf) , but, PERL is... (1 Reply)
Discussion started by: talashil
1 Replies

2. OS X (Apple)

OSX and Kerberos

Our Network Security folks have mandated that we "Kerberize" our systems to allow them to perform an authenticated scan. This consists of instructions to change /etc/pam.d/sshd from: # sshd: auth account password session auth optional use_kcminit auth optional ... (0 Replies)
Discussion started by: jnojr
0 Replies

3. AIX

Problems with kerberos and forest domain

Hi, I have a simple Apache setup that works fine when I create a keytab on a domain level authentication works fine. When I create a keytab at the forest level authentication does not work. I get the following error message. Does anyone know what I am doing wrong here? I validated there is the... (0 Replies)
Discussion started by: 3junior
0 Replies

4. AIX

Auth against AD (kerberos) does not work

@kah00na and all others, i have done al steps of the HowTo "Authenticate AIX users from MSActive Directory", found in this forum, but it still does not work. The test with kinit USERNAME works fine. But if i try to login i get the "UNKNOWN_USER" error in the debug.log.All steps to change... (11 Replies)
Discussion started by: tomys
11 Replies

5. Programming

Kerberos Authentication c/c++

I am in the process of developing a application that needs to be able to authenticate users details with a kerberos server, which is proving to be rather difficult. There seems to be a lack of good information on how to do this using the MIT kerberos api. Can anyone point me in the right... (0 Replies)
Discussion started by: mshindo
0 Replies

6. AIX


I was wondering if any of you have used NFS4 with KERBEROS in a HACMP setup and environment with more than 1 resourcegroup that has NFS mount in them. I Configures the host keys for an Network File System (NFS) server I get stuck with the nfshostkey I can only add one at a time per system so... (0 Replies)
Discussion started by: ravager
0 Replies

7. AIX

SSH and Kerberos

I have 2 servers (lft1 and lft3) running AIX 5.3 ML 5. Both are installed with krb5.client.rte and openssh.base.server I have configured some of the users on both servers to authenticate against our Windows 2003 Active Directory. From my PC, I can use telnet to login... (1 Reply)
Discussion started by: asch337
1 Replies

8. Solaris

kerberos security

i m new 2 unix world can some body explain me abt kerberos pls explain in detail..! (2 Replies)
Discussion started by: sriram.s
2 Replies

9. Cybersecurity

Kerberos security

I have installed Kerberos security in my UNIX system but I need to disable because of an application conflict with Kerberos. So Anybody ca tell me how can I disable it? Thank you (1 Reply)
Discussion started by: dansanmex
1 Replies
Login or Register to Ask a Question