hanks@TWG.COM (Dale R Hanks) (12/05/90)
Hi everybody. I have just compiled kerberos (on a Sun) and am trying it out for the first time so if I ask a couple of dumb questions at least you know why. I believe I have set up everything as in the "Kerberos Operation Notes" dated 1/24/89. I have kerberos and kadmind running and I am trying kpasswd as in the documentation. What happens is after I enter my old password I get: Kerberos error: Principal unknown (kerberos) I suppose I have my tables set up incorrectly. Does this look OK (from kdb_util dump)? changepw obelix.twg.com 255 1 1 0 be229076 d3d493a 200001010459 199011292235 db_creation * hanks admin 255 1 1 0 d344a31c 88b5acfc 200001010459 199011301946 * * kerberos admin 255 1 1 0 d344a31c 88b5acfc 200001010459 199011301958 * * krbtgt twg.com 255 1 1 0 5b600f1d 8a47ab1c 200001010459 199011292235 db_creation * K M 255 1 1 0 d344a31c 88b5acfc 200001010459 199011292235 db_creation * hanks * 120 1 1 0 2fee50c6 9a526a79 200001010459 199011301759 * * default * 255 1 1 0 0 0 200001010459 199011292235 db_creation * kerberos * 255 1 1 0 d344a31c 88b5acfc 200001010459 199011301957 * * If I add an entry for changepw.kerberos changepw kerberos 255 1 1 0 be229076 d3d493a 200001010459 199011292235 db_creation * then it gets further. After I verify my new password I get the error kpasswd: Can't find Kerberos ticket or TGT and so it does not change the password. It looks like get_cred is looking for the service changepw with the instance of obelix.twg.com but it finds changepw with the instance of kerberos. I'm sure I set up something wrong in my configuration. Do I have to add any entries in /etc/srvtab or put something in /etc/services for changepw? Thanx for your help, Dale