[Search for users] [Overall Top Noters] [List of all Conferences] [Download this site]

Conference smurf::buildhelp

Title:USG buildhelp questions/answers
Moderator:SMURF::FILTER
Created:Mon Apr 26 1993
Last Modified:Mon Jan 20 1997
Last Successful Update:Fri Jun 06 1997
Number of topics:2763
Total number of notes:5802

194.0. "trouble getting Kerberos ticket." by SMURF::FILTER (Automatic Posting Software - mail to flume::puck) Fri Jul 02 1993 12:09

Date Of Receipt: 	 2-JUL-1993 10:41:38.57
From: 	LOCORE::thompson "Pete Thompson AUEG"
To: 	locore::odehelp
CC: 	locore::thompson
Subj: 	trouble getting Kerberos ticket.

Hi,

	I just re-installed software on my system, so I've probably forgotten
to do something, but.....   when I try to do a "kinit", I get the following:

kinit 
MIT Project Athena (oinker.zk3.dec.com)
Kerberos Initialization
Kerberos name: Peter_S_Thompson
kinit: Can't send request (send_to_kdc)



Do you have any ideas about what I might be doing wrong??


Thanks,
-Pete

T.RTitleUserPersonal
Name
DateLines
194.1Re: trouble getting Kerberos ticket.SMURF::FILTERAutomatic Posting Software - mail to flume::puckFri Jul 02 1993 12:09156
Date Of Receipt: 	 2-JUL-1993 10:59:10.05
From: 	FLUME::"[email protected]" "Madeline Barcia-Asmus USG"
To: 	[email protected] (Pete Thompson AUEG)
CC: 	[email protected]
Subj: 	Re: trouble getting Kerberos ticket.

 >>Hi,
 >>
 >>	I just re-installed software on my system, so I've probably forgotten
 >>to do something, but.....   when I try to do a "kinit", I get the following:
 >>
 >>kinit 
 >>MIT Project Athena (oinker.zk3.dec.com)
 >>Kerberos Initialization
 >>Kerberos name: Peter_S_Thompson
 >>kinit: Can't send request (send_to_kdc)
 >>
 >>
 >>
 >>Do you have any ideas about what I might be doing wrong??
 >>
 >>
 >>Thanks,
 >>-Pete

Heres  a good check list  for you . 

Here's a copy of the instructions for installing ode. 
-Madeline


Installing ODE-II V1.2 on an ALPHA  Client or Workstation
--------------------------------------------------

The steps you need to follow today to install ode

1). Use the su command to log in as root.

2). take kerberos services.alpha information and incorporate
    them into your systems /etc/services file.

# services.alpha
#       @(#)services    4.1 (ULTRIX) 7/2/90
#       services        1.16 (Berkeley) 86/04/20
#
# Network services, Internet style
#
#
# UNIX specific services
#
kxct            549/tcp                         #ODE - II deamon
kerberos        750/tcp         kdc             # kerberos authentication
kerberos        750/udp         kdc             # kerberos authentication
krb_prop        752/tcp         krb_prop        # kerberos propagation
kerberos_master 754/udp         krb_prop        # kerberos propagation
kerberos_master 754/tcp                         # kerberos propagation
supfilesrv      871/tcp                         # software update protocol
##################################################

3). create the /usr/sde and /usr/sde/tmp directories

    mkdir /usr/sde
    chown devbld /usr/sde
    chgrp staff  /usr/sde
    chmod 775    /usr/sde

4). append fstab.alpha in /usr/local/config/ode to your
    /etc/fstab .

    cat /usr/local/config/ode/fstab.alpha >> /etc/fstab
Basically get /usr/sde from somewhere local.

     /usr/sde@your_local     /usr/sde        nfs ro,bg,soft,intr 0 0

5). Enter :

    mount /usr/sde

6). copy krb.conf file from /usr/local/config/ode
    to /etc/krb.conf

    cp /usr/local/config/ode/krb.conf /etc/krb.conf

    Or if one exists on your system, compare and add
    any missing entries.


7). Look for the directory /var/dss/kerberos/tkt,
    if it does not exist, enter:

        mkdir -p /var/dss/kerberos/tkt

8). In any event, be sure to:

        chmod 01777 /var/dss/kerberos/tkt


9). Insure that your system time is close to correct.
    One way to check this is to enter:

    /usr/etc/timedc clock alphabits.aosg.gsf.dec.com

    If the time is off by more than one minute, correct it.
    One way to set the time is to enter:

    /usr/etc/ntp -s -f  buffer.gsf.dec.com
    If the time is off by more than one minute, correct it.
    One way to set the time is to enter:

    /usr/bin/ntp -s -f  buffer.aosg.gsf.dec.com

    To enable automatic time maintenance, do the following:

    Add the following two lines to the end of /etc/ntp.conf:
    server buffer

    add the following two lines to the end of /etc/rc.config:
    XNTPD_CONF="YES"
    export XNTPD_CONF

    After your next reboot, the xntpd deamon will be started.
    If you wish to start it without a reboot use:

        xntpd -l

    It is advised that all workstations run either ntp, xntp,
    timed to keep the time on the workstation correct. Kerberos
    will not function properly if the time drifts to much.

10). Log back in with your user name, and change your setup.
     The following setup assumes the C shell and a pmax on ULTRIX
     installation. You may have to adjust for this.

     See your ODE-II support person if you don't have your
     Kerberos principal name and password.

11). A. Edit the file that controls your environment setup.
        For example, if you use csh , edit your .login to include
        the following lines:

        setenv PRINCIPAL <Your_Kerberos_Principal_Name>  # usually First_Lastname
        setenv EDITOR <your_choice_of_editors>
        set path=(/usr/sde/tools/pmax_ultrix/bin $path)  # OSF/1: .../pmax_ace/bin

     B. source .login
     C. rehash
     D. kdestroy
     E. kpasswd -n $PRINCIPAL
     F. "Wait 15 minutes"
     G. kinit $PRINCIPAL



This completes the ODE-II installation for a client workstation.