f



kadmin.local: Cannot find/read stored master key

Hello,

I've got problems setting up Krb5 on my Crux Linux host.
I did all nessessary things and always get stuck at the point trying to
create the keytab file with kadmin.local.
The program says:

Authenticating as principal root/admin@TESTSERVER.FREEBIS.DE with
password. 
kadmin.local: Cannot find/read stored master key while
initializing kadmin.local interface

Here is my /etc/krb5.conf:
-----------------------------------------------------------------------
[libdefaults]
        default_realm = TESTSERVER.FREEBIS.DE
        dns_lookup_realm = false
        dns_lookup_kdc = false

[realms]
        FREEBIS.DE = {
                kdc = 62.27.20.125:88
                admin_server = 62.27.20.125:750
                default_domain = localhost
        }


[domain_realm]
        .localhost = TESTSERVER.FREEBITS.DE
        localhost = TESTSERVER.FREEBITS.DE

[logging]
        default = FILE:/var/log/krb5libs.log
        kdc = FILE:/var/log/krb5kdc.log
        admin_server = FILE:/var/log/kadmind.log

[kdc]
        profile = /var/krb5kdc/kdc.conf
-----------------------------------------------------------------------

Here is my /var/krb5kdc/kdc.conf:
-----------------------------------------------------------------------
[kdcdefaults]
        kdc_ports = 750,88

[realms]
        TESTSERVER.FREEBITS.DE = {
                master_key_type = des-cbc-crc
		database_name = /var/krb5kdc/principal
                admin_keytab = FILE:/var/krb5kdc/kadm5.keytab
                acl_file = /var/krb5kdc/kadm5.acl
                key_stash_file = /var/krb5kdc/.k5.TESTSERVER.FREEBITS.DE
                kdc_ports = 750,88
                max_life = 10h 0m 0s
                max_renewable_life = 7d 0h 0m 0s
        }
-----------------------------------------------------------------------

Any help would be very appreciative.

Greetings from Germany
- Marcel Karras

--
Contact: toka@freebits.de
http://www.freebits.de
Unix, Linux && OpenSource
0
toka (4)
7/1/2004 8:35:07 PM
comp.protocols.kerberos 5541 articles. 1 followers. jwinius (31) is leader. Post Follow

1 Replies
3575 Views

Similar Articles

[PageSpeed] 27

On Thu, 1 Jul 2004 22:35:07 +0200
Marcel Karras <toka@freebits.de> wrote:

> Hello,
> 
> I've got problems setting up Krb5 on my Crux Linux host.
> I did all nessessary things and always get stuck at the point trying
> to create the keytab file with kadmin.local.
> The program says:
> 
> Authenticating as principal root/admin@TESTSERVER.FREEBIS.DE with
> password. 
> kadmin.local: Cannot find/read stored master key while
> initializing kadmin.local interface
> 
> Here is my /etc/krb5.conf:
> ---------------------------------------------------------------------
> [libdefaults]
>         default_realm = TESTSERVER.FREEBIS.DE

My fault                                    ^ - a T is missing

>         dns_lookup_realm = false
>         dns_lookup_kdc = false
> 
> [realms]
>         FREEBIS.DE = {
>                 kdc = 62.27.20.125:88
>                 admin_server = 62.27.20.125:750
>                 default_domain = localhost
>         }
> 
> 
> [domain_realm]
>         .localhost = TESTSERVER.FREEBITS.DE
>         localhost = TESTSERVER.FREEBITS.DE
> 
> [logging]
>         default = FILE:/var/log/krb5libs.log
>         kdc = FILE:/var/log/krb5kdc.log
>         admin_server = FILE:/var/log/kadmind.log
> 
> [kdc]
>         profile = /var/krb5kdc/kdc.conf
> ---------------------------------------------------------------------
> --
> 
> Here is my /var/krb5kdc/kdc.conf:
> ---------------------------------------------------------------------
> --[kdcdefaults]
>         kdc_ports = 750,88
> 
> [realms]
>         TESTSERVER.FREEBITS.DE = {
>                 master_key_type = des-cbc-crc
> 		database_name = /var/krb5kdc/principal
>                 admin_keytab = FILE:/var/krb5kdc/kadm5.keytab
>                 acl_file = /var/krb5kdc/kadm5.acl
>                 key_stash_file =
>                 /var/krb5kdc/.k5.TESTSERVER.FREEBITS.DE kdc_ports =
>                 750,88 max_life = 10h 0m 0s
>                 max_renewable_life = 7d 0h 0m 0s
>         }
> ---------------------------------------------------------------------
> --
> 
> Any help would be very appreciative.
> 
> Greetings from Germany
> - Marcel Karras
> 
> --
> Contact: toka@freebits.de
> http://www.freebits.de
> Unix, Linux && OpenSource


-- 
Contact: toka@freebits.de
http://www.freebits.de
Unix, Linux && OpenSource
0
toka (4)
7/7/2004 6:53:55 AM
Reply: