KKDCP with KDC

classic Classic list List threaded Threaded
5 messages Options
Reply | Threaded
Open this post in threaded view
|

KKDCP with KDC

Jim Shi-2
I have krb5-1.15 client and have kkdcp server set up running.
I verify that  my kkdcp end point is reachable. (ie. https://my_server.com/kkdcp is reachable)
However when run:
KRB5_TRACE=/dev/stdout kinit -V my_test_account

I got 
kinit: Cannot contact any KDC for realm '<TEST_REALM>' while getting initial credentials

What could the reason?
________________________________________________
Kerberos mailing list           [hidden email]
https://mailman.mit.edu/mailman/listinfo/kerberos
Reply | Threaded
Open this post in threaded view
|

Re: KKDCP with KDC

Greg Hudson
On 03/07/2017 05:26 PM, Jim Shi wrote:
> I have krb5-1.15 client and have kkdcp server set up running.
> I verify that  my kkdcp end point is reachable. (ie. https://my_server.com/kkdcp is reachable)
> However when run:
> KRB5_TRACE=/dev/stdout kinit -V my_test_account
>
> I got
> kinit: Cannot contact any KDC for realm '<TEST_REALM>' while getting initial credentials
>
> What could the reason?

What's in the trace log?
________________________________________________
Kerberos mailing list           [hidden email]
https://mailman.mit.edu/mailman/listinfo/kerberos
Reply | Threaded
Open this post in threaded view
|

Re: KKDCP with KDC

Jim Shi-2
Hi. Greg,
Here is the trace log. It did tell why it can not connect to the server:
 KRB5_TRACE=/dev/stdout kinit -V jimtest
Using default cache: /tmp/krb5cc_3555
Using principal: jimtest@XXXX
kinit: Cannot contact any KDC for realm 'XXXX' while getting initial credentials
On Tuesday, March 7, 2017, 4:24:20 PM PST, Greg Hudson <[hidden email]> wrote:On 03/07/2017 05:26 PM, Jim Shi wrote:
> I have krb5-1.15 client and have kkdcp server set up running.
> I verify that  my kkdcp end point is reachable. (ie. https://my_server.com/kkdcp is reachable)
> However when run:
> KRB5_TRACE=/dev/stdout kinit -V my_test_account
>
> I got
> kinit: Cannot contact any KDC for realm '<TEST_REALM>' while getting initial credentials
>
> What could the reason?

What's in the trace log?
________________________________________________
Kerberos mailing list           [hidden email]
https://mailman.mit.edu/mailman/listinfo/kerberos
Reply | Threaded
Open this post in threaded view
|

Re: KKDCP with KDC

Greg Hudson
I'm not sure why, but there aren't any trace logs in that output.  Trace
log messages have timestamps and look like:

[28206] 1488944409.905935: Getting initial credentials for [hidden email]

On 03/07/2017 08:01 PM, Jim Shi wrote:

> Hi. Greg,
>
> Here is the trace log. It did tell why it can not connect to the server:
>
>  KRB5_TRACE=/dev/stdout kinit -V jimtest
> Using default cache: /tmp/krb5cc_3555
> Using principal: jimtest@XXXX
> kinit: Cannot contact any KDC for realm 'XXXX' while getting initial
> credentials
> On Tuesday, March 7, 2017, 4:24:20 PM PST, Greg Hudson <[hidden email]>
> wrote:
> On 03/07/2017 05:26 PM, Jim Shi wrote:
>
>> I have krb5-1.15 client and have kkdcp server set up running.
>> I verify that  my kkdcp end point is reachable. (ie.
> https://my_server.com/kkdcp is reachable)
>> However when run:
>> KRB5_TRACE=/dev/stdout kinit -V my_test_account
>>
>> I got
>> kinit: Cannot contact any KDC for realm '<TEST_REALM>' while getting
> initial credentials
>>
>> What could the reason?
>
>
> What's in the trace log?
>
________________________________________________
Kerberos mailing list           [hidden email]
https://mailman.mit.edu/mailman/listinfo/kerberos
Reply | Threaded
Open this post in threaded view
|

Re: KKDCP with KDC

Benjamin Kaduk-2
Maybe it's best to 'type kinit' to confirm that the expected binary
is what is being run...

-Ben

On Tue, Mar 07, 2017 at 10:40:36PM -0500, Greg Hudson wrote:
> I'm not sure why, but there aren't any trace logs in that output.  Trace
> log messages have timestamps and look like:
>
> [28206] 1488944409.905935: Getting initial credentials for [hidden email]
________________________________________________
Kerberos mailing list           [hidden email]
https://mailman.mit.edu/mailman/listinfo/kerberos