Kerberos on Solaris 9



Kerberos auth has been working fine for a while now, but at some point
recently it broke on my Solaris 9's, but it still works on my Solaris
10's. I haven't changed anything config-wise.

user@host:~$ uname -a
SunOS host 5.9 Generic_122300-17 sun4u sparc SUNW,Sun-Fire-V440
user@host:~$ getent hosts kerberos.my.domain
129.107.56.30 kerberos.cedar.my.domain kerberos.my.domain
user@host:~$ kinit user
Password for user@xxxxxxxxxxxxxxx:
kinit: Cannot resolve network address for KDC in requested realm while
getting initial credentials
user@host:~$ cat /etc/krb5/krb5.conf
#
#pragma ident "@(#)krb5.conf 1.2 99/07/20 SMI"
# Copyright (c) 1999, by Sun Microsystems, Inc.
# All rights reserved.
#

# krb5.conf template
# In order to complete this configuration file
# you will need to replace the __<name>__ placeholders
# with appropriate values for your network.
#
[libdefaults]
default_realm = CEDAR.MY.DOMAIN
verify_ap_req_nofail = false

[realms]
CEDAR.MY.DOMAIN = {
kdc = kerberos.my.domain
admin_server = labrador.my.domain
}

<...SNIP...>
_______________________________________________
sunmanagers mailing list
sunmanagers@xxxxxxxxxxxxxxx
http://www.sunmanagers.org/mailman/listinfo/sunmanagers



Relevant Pages

  • Re: Network address resolution problem on AIX
    ... > I keep getting a "kinit: Cannot resolve network address for KDC in ... > requested realm while getting initial credentials" error when I run kinit. ...
    (comp.protocols.kerberos)
  • Re: Kerberos error: Unknown code krb5 195
    ... Cannot resolve network address for KDC in requested realm while getting initial credentials ...
    (comp.protocols.kerberos)
  • Re: Encryption Type wrong
    ... >> number of clients on GNU/Linux. ... For both the KDC and the ... > work fine with no DES enctypes at all. ... of enctypes the Solaris KDC supports. ...
    (comp.protocols.kerberos)
  • Solaris K5, MIT K5 compatibility issues
    ... what are the compatibility issues between Solaris clients and an MIT K5 KDC? ... We're trying, for some application testing that needs to be done before we can set up a production environment, to run the Solaris 10 supplied kadmin against the MIT 1.6.2 KDC. ...
    (comp.protocols.kerberos)
  • Re: Sun/MIT <-> Heimdal version compatibility issue?
    ... that I'm trying to add a Solaris 11 client to. ... The kdc in my immediate realm where the host principals ... Solaris 10 client machines within the same realm. ... works fine and I can ssh into the Solaris 11 client machine ...
    (comp.protocols.kerberos)