[Search for users] [Overall Top Noters] [List of all Conferences] [Download this site]

Conference smurf::buildhelp

Title:	USG buildhelp questions/answers

Moderator:	SMURF::FILTER

Created:	Mon Apr 26 1993
Last Modified:	Mon Jan 20 1997
Last Successful Update:	Fri Jun 06 1997
Number of topics:	2763
Total number of notes:	5802

816.0. "is kerberos broken today?" by SMURF::FILTER (Automatic Posting Software - mail to flume::puck) Fri Jun 24 1994 14:57

Date Of Receipt: 	24-JUN-1994 10:43:42.80
From: 	MINSRV::ftw "Farrell Woods USG  24-Jun-1994 1042"
To: 	odehelp@DEC:.zko.minsrv
CC: 	schulter@DEC:.zko.minsrv
Subj: 	is kerberos broken today?
1.228 marvin: 	ftw> bsubmit -auto atm_arp.c
no authorization to access the server: 	Can't access ticket file (tf_util)
kxct: 	Kerberos error: Unknown protocol version number (kerberos)

No longer using cached authorization
1.229 marvin:ftw> kinit
Kerberos Initialization for "Farrell_Woods"
Password: 
kinit: Generic error (get_intkt)

	-- Farrell

T.R Title User Personal
Name Date Lines

816.1 Re: is kerberos broken today? SMURF::FILTER Automatic Posting Software - mail to flume::puck Fri Jun 24 1994 14:57 50

T.R	Title	User	Personal Name	Date	Lines
816.1	Re: is kerberos broken today?	SMURF::FILTER	Automatic Posting Software - mail to flume::puck	`Fri Jun 24 1994 14:57`	50
	Date Of Receipt: 24-JUN-1994 10:53:38.02 From: MINSRV::vandyck "Grant Van Dyck 24-Jun-1994 1052" To: [email protected] CC: [email protected], [email protected] Subj: Re: is kerberos broken today? \| 1.228 marvin: ftw> bsubmit -auto atm_arp.c \| no authorization to access the server: Can't access ticket file (tf_util) \| kxct: Kerberos error: Unknown protocol version number (kerberos) \| \| No longer using cached authorization \| 1.229 marvin:ftw> kinit \| Kerberos Initialization for "Farrell_Woods" \| Password: \| kinit: Generic error (get_intkt) \| \| \| \| -- Farrell \| Check the file /etc/krb.conf on your system. It should have perms like: -rw-r--r-- 1 root system 177 Jun 7 13:56 /etc/krb.conf And contents that look like: ZONE ZONE kerberos1.zk3.dec.com ZONE kerberos2.zk3.dec.com ZONE kerberos3.zk3.dec.com ZONE kerberos4.zk3.dec.com ZONE kerberos.zk3.dec.com ZONE kerberos.zk3.dec.com admin dummy For this to work bind must be running on marvin so that it can map the kerberos aliases to real machine names. cardinal icons/colbgnd [33] nslookup kerberos Server: flambe.zk3.dec.com Address: 16.140.96.19 Name: yield.zk3.dec.com Address: 16.140.0.12 Aliases: kerberos.zk3.dec.com cardinal icons/colbgnd [34] -Grant

Date Of Receipt: 	24-JUN-1994 10:53:38.02
From: 	MINSRV::vandyck "Grant Van Dyck  24-Jun-1994 1052"
To: 	[email protected]
CC: 	[email protected], [email protected]
Subj: 	Re: is kerberos broken today?
| 1.228 marvin: 	ftw> bsubmit -auto atm_arp.c
| no authorization to access the server: 	Can't access ticket file (tf_util)
| kxct: 	Kerberos error: Unknown protocol version number (kerberos)

| 
| No longer using cached authorization
| 1.229 marvin:ftw> kinit
| Kerberos Initialization for "Farrell_Woods"
| Password: 
| kinit: Generic error (get_intkt)
| 
| 
| 
| 	-- Farrell
| 

Check the file /etc/krb.conf on your system. It should have perms like:

-rw-r--r--   1 root     system       177 Jun  7 13:56 /etc/krb.conf

And contents that look like:
ZONE
ZONE    kerberos1.zk3.dec.com
ZONE    kerberos2.zk3.dec.com
ZONE    kerberos3.zk3.dec.com
ZONE    kerberos4.zk3.dec.com
ZONE    kerberos.zk3.dec.com
ZONE    kerberos.zk3.dec.com    admin   dummy

For this to work bind must be running on marvin so that it can map
the kerberos aliases to real machine names.

cardinal icons/colbgnd [33] nslookup kerberos
Server:  flambe.zk3.dec.com
Address:  16.140.96.19

Name:    yield.zk3.dec.com
Address:  16.140.0.12
Aliases:  kerberos.zk3.dec.com

cardinal icons/colbgnd [34] 

	-Grant