[comp.protocols.kerberos] Help please!

grins@MIPS.COM (Randall Grinstead) (03/08/91)

I've been trying to install kerberos et al on one of our  systems
with   limited   success.    Although   kerberos  appears  to  be
functioning  normally  the  administration   server   does   not.
Following the example given in section 3.4 of the Operation Notes
(Testing kpasswd) I kept receving the  error  "Unknown  principal
(kerberos)".   Further  checking  showed  kpasswd  to the passing
"changepwd.kerberos" to kerberos for verification.  I  then  used
kdb_edit to create such an entry.  Now, both kpasswd and kadm can
verify the entry but ultimately fail with  "Can't  find  Kerberos
ticket  ...".   What  am I doing wrong?  Any help would be *much*
appreciated!

Sincerely,

	Randy Grinstead
-- 
Randy Grinstead		I speak only for myself, etc., etc., etc.
UUCP:			    {ames,decwrl,prls,pyramid}!mips!grins
INTERNET:	grins@mips.COM (grins%mips.com@ames.arc.nasa.gov)
USPS: 	MIPS Computer Systems,  950 DeGuigne, Sunnyvale, CA 94086

jon@MIT.EDU (Jon A. Rochlis) (03/09/91)

   "changepwd.kerberos" to kerberos for verification.  I  then  used

You mean "changepw.kerberos" not "changepwd.kerberos" don't you?

   kdb_edit to create such an entry.  Now, both kpasswd and kadm can
   verify the entry but ultimately fail with  "Can't  find  Kerberos
   ticket  ...".   What  am I doing wrong?  Any help would be *much*
   appreciated!

Any idea what ticket they can't find?  Does the kerberos.log show an
initial ticket request for changepw.kerberos for the principal using
kpasswd/kadm?

		-- Jon