Conference smurf::buildhelp

Date Of Receipt: 	19-MAY-1993 09:23:22.93
From: 	WASTED::"[email protected]" "Madeline Barcia-Asmus USG"
To: 	[email protected] (Master of my domain!)
CC: 	[email protected]
Subj: 	Re: kinit problems

 >>Good morning,
 >>
 >>	I tried to get a ticket for my kerboros account this morning (like
 >>I normally do) on our alpha machine, alfee.  But I get the following error:
 >>
 >>csh> kinit
 >>MIT Project Athena (alfee.zk3.dec.com)
 >>Kerberos Initialization
 >>Kerberos name: Andy_DAmore
 >>Password:
 >>kinit: Time is out of bounds (krb_rd_req)
 >>csh>
 >>
 >>	Any ideas on why that's happening, it never has before.
 >>
 >>	Thanks,
 >>	-andy
 >>
We use to have a readme for setting up a ode client.
I was just informed that its going to go into something equivalent
to vtx for unix. In the mean time , here is the information which
will help you.


9). Insure that your system time is close to correct.
    One way to check this is to enter:

    /usr/sbin/timedc clock alphabits.aosg.gsf.dec.com

    If the time is off by more than one minute, correct it.
    One way to set the time is to enter:

    /usr/etc/ntp -s -f buffer.zk3.dec.com


    To enable automatic time maintenance, do the following:

    Add the following two lines to the end of /etc/ntp.conf:
    server buffer.zk3.dec.com 

    add the following two lines to the end of /etc/rc.config:
    XNTPD_CONF="YES"
    export XNTPD_CONF

    After your next reboot, the xntpd deamon will be started.
    If you wish to start it without a reboot use:

         xntpd -l

    It is advised that all workstations run either ntp, xntp,
    timed to keep the time on the workstation correct. Kerberos
    will not function properly if the time drifts to much.

Date Of Receipt: 	19-JAN-1994 12:54:41.18
From: 	ABYSS::masha "Masha Golosovker USG"
To: 	abyss::odehelp
CC: 	
Subj: 	kinit

Hello,

Thanks for your previous help.

Now I have a problem (or not a problem?) with kinit:

after I type in my passwd it says:

kinit: Time is out of bounds (krb_rd_req)

         
I get the same error when I try to change my passwd with 
>kpasswd -n Masha_Golosovker

after I type in my old passwd, it gives me the same "Time is out of
bounds" error.

 (If I type kpasswd without arguments, it thinks that my PRINCIPAL is masha
 and gives a different error).

What does it mean?

        Thank you for being out there,

               Masha

Date Of Receipt: 	19-JAN-1994 13:06:04.09
From: 	US2RMC::"[email protected]" "John Flanagan"
To: 	[email protected]
CC: 	[email protected], [email protected]
Subj: 	Re: kinit

You need to have your system time in sync with the production
systems.  You can do this by running the Network Time Protocol service.
Run ntpsetup as root on your workstation to set this up.  Or, reset the
time on your system to be within 5 minutes of the time on the production
systems.  ntp will keep you in sync permanently...

John

% Received: 	by us2rmc.bb.dec.com; id AA08235; Wed, 19 Jan 94 13:03:40 -0500
	from localhost by flambe.zk3.dec.com; (5.65/1.1.8.2/01Nov93-1038AM) id AA00244; Wed, 19 Jan 1994 13:06:20 -050
% Message-Id: 	<[email protected]>
% To: 	[email protected]
% Cc: 	[email protected], [email protected]
% Subject: 	Re: kinit
% In-Reply-To: 	Your message of "Wed, 19 Jan 94 12:55:00 EST." <[email protected]>
% Date: 	Wed, 19 Jan 94 13:06:20 -0500
% From: 	John Flanagan <[email protected]>
% X-Mts: 	smtp

Date Of Receipt: 	19-JAN-1994 13:17:19.29
From: 	ALPHA::"[email protected]" "Jim McGinness"
To: 	[email protected]
CC: 	[email protected]
Subj: 	Re:  kinit

kinit assumes your username is the entity for which it is requesting a ticket
when you don't supply an argument.

"Time is out of bounds" simply means that the system where you are running
kinit or kpasswd does not have a time syncronized with the kerberos server.
You need to be running ntp or xntp on your workstation to keep the time
in sync.

	-- jmcg

Date Of Receipt: 	19-JAN-1994 13:25:42.66
From: 	ABYSS::masha "Masha Golosovker USG"
To: 	John Flanagan <[email protected]>
CC: 	[email protected], [email protected], abyss::masha
Subj: 	Re: kinit

Thanks for your help,

Could you please tell me now what should I specify for my NTP
server(s) when I run ntpsetup?

       thanks,
             -masha

Date Of Receipt: 	19-JAN-1994 13:32:25.60
From: 	US2RMC::"[email protected]" "Grant Van Dyck"
To: 	[email protected]
CC: 	John Flanagan <[email protected]>, [email protected]
Subj: 	Re: kinit

| Thanks for your help,
| 
| Could you please tell me now what should I specify for my NTP
| server(s) when I run ntpsetup?
| 
|        thanks,
|              -masha

Run /usr/dec/bin/netinfo <nodename> and you'll get something like:

cardinal devbld/build [30] /usr/dec/bin/netinfo cardinal
General information for cardinal:


Host Owner:             vandyck
Owners Group:           reng
Host Location:          3Z29
Office subnet:          blue-yellow-net

Network information for cardinal:

IP Address:             16.140.96.188
Hardware Address:       unknown
Broadcast Address:      16.140.96.255
Subnet Mask:            255.255.255.0
Subnet Name:            blue-yellow-net

Server information for subnet blue-yellow-net and cardinal:

ULTRIX/mop RIS Servers:         cohort(16.140.96.4) [only for ULTRIX RIS installs]
OSF1/bootp RIS Server:          osfris.zk3.dec.com (no addr, this is an alias)
YP/NIS (zk3YP) Servers:         flambe(16.140.96.19) merge(16.140.112.6)
BIND (.zk3.dec.com) Servers:    flambe(16.140.96.19) merge(16.140.112.6)
NNTP (news) Server:             decvax.dec.com(16.140.0.3)
NTP (ULTRIX time) Servers:      abyss(16.140.64.3) cohort(16.140.96.4)
XNTP (OSF1 time) Servers:       flambe(16.140.96.19) quarry(16.140.16.3)



% Received: 	by us2rmc.bb.dec.com; id AA09311; Wed, 19 Jan 94 13:30:01 -0500
	from localhost by cardinal.zk3.dec.com; (5.65/1.1.8.2/01Nov93-1038AM) id AA01029; Wed, 19 Jan 1994 13:32:41 -050
% Message-Id: 	<[email protected]>
% To: 	[email protected]
% Cc: 	John Flanagan <[email protected]>, [email protected]
% Subject: 	Re: kinit
% In-Reply-To: 	Your message of "Wed, 19 Jan 94 13:25:58 EST." <[email protected]>
% Date: 	Wed, 19 Jan 94 13:32:41 -0500
% From: 	Grant Van Dyck <[email protected]>
% X-Mts: 	smtp

Date Of Receipt: 	19-JAN-1994 14:03:51.63
From: 	US2RMC::"[email protected]" "John Flanagan"
To: 	[email protected]
CC: 	John Flanagan <[email protected]>, [email protected], [email protected]
Subj: 	Re: kinit

Masha,

You can figure this out by logging onto a production machine [such
as flume or flambe, and typing "/usr/dec/bin/netinfo <hostname>"
substituting <hostname> with your workstations hostname.   Look
for the field "NTP (ULTRIX time) Servers:" and/or "XNTP (OSF1 time) Servers"


John

% Received: 	by us2rmc.bb.dec.com; id AA10182; Wed, 19 Jan 94 14:01:27 -0500
	from localhost by flambe.zk3.dec.com; (5.65/1.1.8.2/01Nov93-1038AM) id AA02951; Wed, 19 Jan 1994 14:04:06 -050
% Message-Id: 	<[email protected]>
% To: 	[email protected]
% Cc: 	John Flanagan <[email protected]>, [email protected], [email protected]
% Subject: 	Re: kinit
% In-Reply-To: 	Your message of "Wed, 19 Jan 94 13:25:58 EST." <[email protected]>
% Date: 	Wed, 19 Jan 94 14:04:06 -0500
% From: 	John Flanagan <[email protected]>
% X-Mts: 	smtp

Date Of Receipt: 	21-FEB-1994 08:50:26.80
From: 	ABYSS::jsd "John Dustin"
To: 	abyss::odehelp
CC: 	abyss::jsd
Subj: 	kinit problem

alfred> workon
cd'ing to sandbox source directory: /usr/projects/netode/jsd/sandboxes/gold/src.
starting new shell: /bin/csh.
MIT Project Athena (dalfred)
Kerberos Initialization for "John_Dustin"
Password:
kinit: Time is out of bounds (krb_rd_req)
goldsb> date
Mon Feb 21 08:42:18 EST 1994

Does anyone know what this means and how I can get around it?

Thanks,

John

Date Of Receipt: 	21-FEB-1994 09:10:16.18
From: 	US2RMC::"[email protected]" "MAIL-11 Daemon"
To: 	[email protected] (John Dustin)
CC: 	[email protected], [email protected]
Subj: 	Re: kinit problem

The clock on your machine is out of sync with the the one on the submit
server. If you ran /usr/sde/install/ode setup, it should have installed xntp
on your machine to keep the clock synced.  If you set that up now you
should be OK.

> 
> alfred> workon
> cd'ing to sandbox source directory: /usr/projects/netode/jsd/sandboxes/gold/src.
> starting new shell: /bin/csh.
> MIT Project Athena (dalfred)
> Kerberos Initialization for "John_Dustin"
> Password:
> kinit: Time is out of bounds (krb_rd_req)
> goldsb> date
> Mon Feb 21 08:42:18 EST 1994
> 
> Does anyone know what this means and how I can get around it?
> 
> Thanks,
> 
> John
> 


-- 

				-Grant

% Received: 	by us2rmc.bb.dec.com; id AA04097; Mon, 21 Feb 94 09:06:32 -0500
	by cardinal.zk3.dec.com; (5.65/1.1.8.2/01Nov93-1038AM) id AA08966; Mon, 21 Feb 1994 09:08:59 -050
% From: 	Grant Van Dyck <[email protected]>
% Message-Id: 	<[email protected]>
% Subject: 	Re: kinit problem
% To: 	[email protected] (John Dustin)
% Date: 	Mon, 21 Feb 1994 09:08:59 -0500 (EST)
% Cc: 	[email protected], [email protected]
% In-Reply-To: 	<[email protected]> from "John Dustin" at Feb 21, 94 08:49:48 am
% Reply-To: 	[email protected]
% X-Mailer: 	ELM [version 2.4 PL20]
% Content-Type: 	text
% Content-Length: 	657

Date Of Receipt: 	17-OCT-1994 18:09:21.42
From: 	WASTED::"[email protected]" "17-Oct-1994 1803"
To: 	[email protected]
CC: 	
Subj: 	kinit problem

Hi,
	A user here cannot get a ticket because kinit tells him that
the "time is out of bounds". However, other people can kinit
on the same system.

	Can you help?
Thanks,

Rich
================================================================
Rich Larsen, M/S: UNX			TCP/IP: [email protected]
USSG/User Env. & Std. Group		DECnet: UNXA::LARSEN
Digital Equipment Corporation		FAX:	908-577-6003
200 Route 9 North			Voice:	908-577-6083	
Manalapan, New Jersey 07726		DTN:	462 

Date Of Receipt: 	18-OCT-1994 12:50:02.27
From: 	ALPHA::"[email protected]"
To: 	[email protected], [email protected]
CC: 	
Subj: 	Re:  kinit problem

Rich,

	Your kerberos server's time is too far out of date.  Check your
	/etc/krb.conf file and the first server name found is the problem.

	Who ever manages that system, have the set the time to the correct
	value.  Keberos only allows the time to be a minute or two out of
	sync.

Sean

Date Of Receipt: 	 7-JUN-1995 16:47:14.30
From: 	SMURF::WASTED::grava "Bill Grava USG  07-Jun-1995 1645"
To: 	odehelp@DEC:.zko.wasted
CC: 	
Subj: 	kinit problems

problem resolved -- krb.conf changes on my workstation did the
trick...

thanks,

-bill (DTN: 1-6177; http://www.zk3.dec.com/~grava/)
	A rolling stone gathers momentum.

Date Of Receipt: 	11-JUL-1995 14:11:52.50
From: 	SMURF::GURU::kohari "MOIZ KOHARI USG  11-Jul-1995 1409"
To: 	admin@dec:.zko.guru, odehelp@dec:.zko.guru
CC: 	kohari@dec:.zko.guru
Subj: 	kinit problems

Hello,

I am having some problems doing a kinit $PRINCIPAL:

> kinit $PRINCIPAL
Kerberos Initialization for "Moiz_Kohari"
Password:
kinit: Time is out of bounds (krb_rd_req)

I tried to rearrange /etc/krb.conf, but it did not help.
I also pinged some of the hosts from this file, e.g.
kerberos1, kerberos3, etc. with out a problem (meaning,
0% packet loss).

Please help,

Moiz Kohari
USEG
DTN: 381-1900

Date Of Receipt: 	11-JUL-1995 14:31:57.26
From: 	SMURF::WASTED::"[email protected]" "11-Jul-1995 1430"
To: 	[email protected]
CC: 	[email protected], [email protected], [email protected]
Subj: 	Re: kinit problems

The time on your machine is "out of bounds" with respect to the kerberos 
server. Try running ntpsetup so your clock stays in sync, or at least set it 
by hand.


		-Grant
| 
| Hello,
| 
| I am having some problems doing a kinit $PRINCIPAL:
| 
| > kinit $PRINCIPAL
| Kerberos Initialization for "Moiz_Kohari"
| Password:
| kinit: Time is out of bounds (krb_rd_req)
| 
| I tried to rearrange /etc/krb.conf, but it did not help.
| I also pinged some of the hosts from this file, e.g.
| kerberos1, kerberos3, etc. with out a problem (meaning,
| 0% packet loss).
| 
| Please help,
| 
| Moiz Kohari
| USEG
| DTN: 381-1900

Date Of Receipt: 	11-JUL-1995 14:42:47.58
From: 	SMURF::FLUME::jmf "Joshua M. Friedman OSF/UNIX SDE  11-Jul-1995 1441"
To: 	kohari@DEC:.zko.flume
CC: 	[email protected], odehelp@DEC:.zko.flume, jmf@DEC:.zko.flume
Subj: 	Re: kinit problems

Moiz, when you stopped by I didn't remember you mentioning the "time
out of bounds" error.  

Your system clock must be within 5 minutes of the kerberos server's.

See Grant's mail he sent mentioning ntpsetup
 
-josh

Date Of Receipt: 	29-SEP-1995 13:58:02.47
From: 	SMURF::ALPHA::rmorris "Richard Morris USG  29-Sep-1995 1356"
To: 	odehelp@DEC:.zko.alpha
CC: 	
Subj: 	kinit

I'm getting the following error from kinit.
Please re-register my kerberos identity.

% /usr/sde/tools/alpha_OSF1/bin/kinit 
Kerberos Initialization
Kerberos name: Richard_Morris
kinit: Principal expired (kerberos)

Thanks You,
Rich Morris

Date Of Receipt: 	25-OCT-1995 10:37:34.43
From: 	SMURF::WASTED::fleming "Caroline Fleming USG"
To: 	fleming odehelp
CC: 	
Subj: 	kinit problem
I can not do kinit. I get the following message: 	

% kinit
Kerberos Initialization
Kerberos name: Caroline_Fleming
kinit: Can't send request (send_to_kdc)

Caroline

Date Of Receipt: 	25-OCT-1995 10:53:47.30
From: 	SMURF::ALPHA::"[email protected]" "25-Oct-1995 1051"
To: 	Caroline Fleming USG <[email protected]>
CC: 	[email protected]
Subj: 	Re: kinit problem

On what machine, yours or a production machine? If yours, this message either 
has to do with the existance/permissions on /var/dss/kerberos/txt (should be 
1777) or it has to do with the actual sending of the request. 

Is this a newly installed system? Did you run /usr/sde/ode/install ode?

Have you run bindsetup?

You can try kinit -debug and see if it returns a clue about the nature of your 
problem.


		-Grant

| I can not do kinit. I get the following message:
| 
| % kinit
| Kerberos Initialization
| Kerberos name: Caroline_Fleming
| kinit: Can't send request (send_to_kdc)
| 
| Caroline

Date Of Receipt: 	22-JUL-1996 14:26:08.07
From: 	FLUME::"[email protected]" "Richard Morris USG  22-Jul-1996 1425"
To: 	[email protected]
CC: 	
Subj: 	kinit problem

I am unable to run kinit for principal "Richard_Morris".
I'm getting back "kinit: Principal unknown (kerberos)".

Thanks for any help.

-- Rich Morris

Date Of Receipt: 	20-NOV-1996 11:20:51.95
From: 	HUNCH::"[email protected]"
To: 	[email protected]
CC: 	
Subj: 	kinit problem

I've recently installed 4.0 and can't do a kinit.  

I get the following.  Any ideas?

mada> kinit $PRINCIPAL
Kerberos Initialization for "Stephanie_Adams"
Password: 
kinit: Generic error (get_intkt)
smada> 


Thanks in advance for your help

Date Of Receipt: 	20-NOV-1996 11:27:48.96
From: 	FLUME::"[email protected]" "20-Nov-1996 1122"
To: 	Stephanie Adams <[email protected]>
CC: 	[email protected]
Subj: 	Re: kinit problem

Try running (as root) /usr/sde/install/ode install

Make sure you are running bind (bindsetup).

See if you can do - nslookup kerberos1


		-Grant
| 
| 
| I've recently installed 4.0 and can't do a kinit.  
| 
| I get the following.  Any ideas?
| 
| mada> kinit $PRINCIPAL
| Kerberos Initialization for "Stephanie_Adams"
| Password: 
| kinit: Generic error (get_intkt)
| smada> 
| 
| 
| Thanks in advance for your help