Getting Kerberos back to work!?

[Anonymous]

Reading the articles about Kerberos I was curious about its functionality and gave it a try.

I turned my independant server into a OD master and all went fine. The whole KDC thingy got done in the background and Apple did a very nice job with that.

Kerberos were working fine with the service on the OD server himself, service being AFP. I wanted to add a hostname into KDC so my mailserver could use the realm for auth. Apples docu on OD is nice and easy, so I did what I found there. I added the name to the computer list and in ODs options added a Kerberos entry with the same name as the computers name.

All I’m getting is:
Unknown credential cache type while opening default credentials cache

any k-util I open says this.

What can I do? Can I delete this default cache or repair it? I already tried to delete every file of kerberos settings, but kdcsetup still won’t work.

best regards,
Philon

[Anonymous]

Well, if I could get Kerberos back working I would love to try your tip out. Looks like I have to reinstall the OS or something like that.

Does Kerberos rely on things in the LDAP? Should I remove the KDC entries in LDAP?

[Anonymous]

The keys I generated yesterday ran out, this somehow fixed this corrupted cache and after doing a bit setup I’m back where I started.

This time I used kadmin.local (when will kadmin work?) to server principals. “ank –random-key host/kclient.example.com” added the client line.

What I’m now facing is the fact that I can’t export the hosts data to a keytab I can copy to the host. The docu I googled uses ext in kadmin or ktadd. Both won’t work with OSX.

[Anonymous]

Ok, something I must have missed. ktadd must be done from within kadmin.

Now I have my keytab for this external host. Let’s see if I can get a unix host authenticate against a OSX kdc.

[Author]

Posts