Kerberos on AIX 5.3 : error :Cannot retrieve key from keytab file

classic Classic list List threaded Threaded
2 messages Options
Reply | Threaded
Open this post in threaded view
|

Kerberos on AIX 5.3 : error :Cannot retrieve key from keytab file

kiranmehta1981
Hi ,
  Following is the output of some of the commands are ran after
  adding principals on kerberos database.


kadmin.local:  getprinc nfs/vcsaix6.vxindia.veritas.co=ADm
Principal: nfs/[hidden email]
Expiration date: [never]
Last password change:  Tue Jul 19 17:21:56 CDT 2005
Password expiration date: [none]
Maximum ticket life: 1 day 00:00:00
Maximum renewable life: 7 days 00:00:00
Last modified: Tue Jul 19 17:21:56 CDT 2005
(root/[hidden email])
Last successful authentication: [never]
Last failed authentication: [never]
Failed password attempts: 0
Number of keys: 4
Key: vno 4, Triple DES cbc mode with HMAC/sha1,
no salt
Key: vno 4, ArcFour with HMAC/md5,
no salt
Key: vno 4, AES-256 CTS mode with 96-bit SHA-1 HMAC,
no salt
Key: vno 4, DES cbc mode with RSA-MD5,
no salt


Attributes:


Policy: [none]
kadmin.local:


------------------------------=AD--
bash-2.05b# klist -k  /etc/krb5/krb5.keytab


Key table: /etc/krb5/krb5.keytab
Number of entries: 4


[1] principal: nfs/[hidden email]
        KVNO: 4


[2] principal: nfs/[hidden email]
        KVNO: 4


[3] principal: nfs/[hidden email]
        KVNO: 4


[4] principal: nfs/[hidden email]
        KVNO: 4
bash-2.05b#
klist -k  /etc/krb5/krb5.keytab
bash-2.05b# kinit -k   -t /etc/krb5/krb5.keytab
nfs/vcsaix6.vxindia.veritas.co=ADm
com.ibm.security.krb5.KrbExcep=ADtion, status code: 0
        message: Cannot retrieve key from keytab for principal
nfs/[hidden email]


When klist is able to read /etc/krb5/krb5.keytab file why is kinit
 not able to retrive the key.=20


thanks,=20
 kiran

________________________________________________
Kerberos mailing list           [hidden email]
https://mailman.mit.edu/mailman/listinfo/kerberos
Reply | Threaded
Open this post in threaded view
|

Re: Kerberos on AIX 5.3 : error :Cannot retrieve key from keytab

Jeffrey Altman-3
[hidden email] wrote:

> klist -k  /etc/krb5/krb5.keytab
> bash-2.05b# kinit -k   -t /etc/krb5/krb5.keytab
> nfs/vcsaix6.vxindia.veritas.co?m
> com.ibm.security.krb5.KrbExcep?tion, status code: 0
>         message: Cannot retrieve key from keytab for principal
> nfs/[hidden email]
>
>
> When klist is able to read /etc/krb5/krb5.keytab file why is kinit
>  not able to retrive the key.

You are using a Java version of kinit.  Does the version of Java
you are using support all of the key types included in the keytab
file?

Jeffrey Altman

--
-----------------
This e-mail account is not read on a regular basis.
Please send private responses to jaltman at mit dot edu
________________________________________________
Kerberos mailing list           [hidden email]
https://mailman.mit.edu/mailman/listinfo/kerberos