Problem with kpasswd on Solaris

classic Classic list List threaded Threaded
1 message Options
Reply | Threaded
Open this post in threaded view

Problem with kpasswd on Solaris

Perez, Ivette

I am new to Kerberos and I have been setting up a test environment to play.
I am having problems changing my principals' password using kpasswd from a
Solaris 8 client. After entering the principal's passwd I receive this
error: Cannot establish a session with the Kerberos administrative server
for realm XXXXXXXXXXX. Database Error! Required KADM5 principal missing.
However, if I run #kpasswd <principal> as root I am able to change the
password. I can also change the password from the Redhat clients so I figure
I am missing something on my Solaris client, maybe permissions???? I really
don't know where to look. Any help would be appreciated.

Additional Info:
KDC: Linux Suse running MIT Kerberos
Log entry when trying kpasswd as principal: Sep 09 10:36:24 kdcserver
krb5kdc[3913](info): AS_REQ (2 etypes {3 1}) CLIENT_IP_ADDRESS:
SERVER_NOT_FOUND: [hidden email] for changepw/[hidden email],
Server not found in Kerberos database

Log entry when trying #kpasswd <principal> as root: Sep 09 10:58:03
kdcserver krb5kdc[3913](info): AS_REQ (7 etypes {18 17 16 23 1 3 2})
CLIENT_IP_ADDRESS: ISSUE: authtime 1126277883, etypes {rep=16 tkt=16
ses=16}, [hidden email] for kadmin/[hidden email]


Ivette Perez
Systems Specialist
Infrastructure Technologies
*   [hidden email]

Notice:  This e-mail message, together with any attachments, contains information of Merck & Co., Inc. (One Merck Drive, Whitehouse Station, New Jersey, USA 08889), and/or its affiliates (which may be known outside the United States as Merck Frosst, Merck Sharp & Dohme or MSD and in Japan, as Banyu) that may be confidential, proprietary copyrighted and/or legally privileged. It is intended solely for the use of the individual or entity named on this message.  If you are not the intended recipient, and have received this message in error, please notify us immediately by reply e-mail and then delete it from your system.
Kerberos mailing list           [hidden email]