f



krb5 1.6 beta 3 on Debian Lenny : kinit(v5): Cannot resolve network address for KDC in realm

I have an issue standing, where I am unable to kinit to get my Krb5 TGT 
locally on the KDC, but have no problems doing the same on one of my 
client machines. I don't care too much about this issue for as long as 
we talk Kerberos credentials on the server itself, however I am really 
puzzled by this behaviour ...

Whenever I execute: kinit <user>   I get:

kinit(v5): Cannot resolve network address for KDC in realm EXAMPLE.COM 
while getting initial credentials

My /etc/resolv.conf looks like this:

domain example.com
search example.com
nameserver 127.0.0.1

My /etc/hostname looks like this:

127.0.0.1   localhost

My /etc/krb5.conf looks like this:

[libdefaults]
    default_realm = EXAMPLE.COM
    ticket_lifetime = 12h
    renew_lifetime = 7d
    dns_fallback = no
    kdc_timesync = 3
    ccache_type = 4
    renewable = true
    forwardable = true
    forward = true
    proxiable = true
    noaddresses = true

# The following encryption type specification will be used by MIT Kerberos
# if uncommented.  In general, the defaults in the MIT Kerberos code are
# correct and overriding these specifications only serves to disable new
# encryption types as they are added, creating interoperability problems.

#    default_tgs_enctypes = aes256-cts arcfour-hmac-md5 des3-hmac-sha1 
des-cbc-crc des-cbc-md5
#    default_tkt_enctypes = aes256-cts arcfour-hmac-md5 des3-hmac-sha1 
des-cbc-crc des-cbc-md5
#    permitted_enctypes = aes256-cts arcfour-hmac-md5 des3-hmac-sha1 
des-cbc-crc des-cbc-md5

[appdefaults]

[realms]
    EXAMPLE.COM = {
        kdc = host.example.com:88
        admin_server = host.example.com:749
        database_module = openldap_ldapconf
        default_domain = example.com
    }

[domain_realm]
    .example.com = EXAMPLE.COM
    example.com = EXAMPLE.COM

[dbdefaults]
    ldap_kerberos_container_dn = "ou=Kerberos,dc=example,dc=com"

[dbmodules]   
    openldap_ldapconf = {
    db_library = kldap
    ldap_kerberos_container_dn = "ou=Kerberos,dc=example,dc=com"
    db_module_dir = /usr/lib/krb5/plugins/kdb
      # this object needs to have read rights on
      # the realm container, principal container and realm sub-trees
    ldap_kdc_dn = "cn=kdc,ou=Kerberos,dc=example,dc=com"
      # this object needs to have read and write rights on
          # the realm container, principal container and realm sub-trees
    ldap_kadmind_dn = "cn=kadmin,ou=Kerberos,dc=example,dc=com"
    ldap_service_password_file = /etc/krb5kdc/service.keyfile
    ldap_servers = ldapi://
    ldap_conns_per_server = 32
    }

[logging]
    kdc = SYSLOG:INFO
    admin_server = FILE=/var/lib/krb5kdc/kadm5.log

[login]
        krb4_convert = true
        krb4_get_tickets = false


My /etc/krb5kdc/kdc.conf looks like this:

[kdcdefaults]

[realms]
    EXAMPLE.COM = {
        kadmin_port = 749
        kdc_timesync = 1
        ccache_type = 4
        renewable = yes
        forwardable = true
        forward = true
        proxiable = true
        noaddresses = true
        max_life = 12h
        max_renew_life = 14d
    }

[logging]
    kdc = SYSLOG:INFO
    admin_server = FILE=/var/lib/krb5kdc/kadm5.log


Both forward and reverse DNS lookups work as supposed to and hostname 
returns 'host', hostname -d returns 'example.com' and hostname -f 
returns 'host.example.com'

Everything which relates to this particular error message seems to be 
related to name resoling, which is no problem at all - it even works 
correctly from my clients ...

Does anyone have a shred of wisdom that's be able to point me in the 
right direction?

Best,

-S�ren G.

0
4/11/2008 7:20:52 PM
comp.protocols.kerberos 5541 articles. 1 followers. jwinius (31) is leader. Post Follow

0 Replies
727 Views

Similar Articles

[PageSpeed] 24

Reply:

Similar Artilces:

AIX 5.3: kinit(v5): Cannot resolve network address for KDC in requested realm while getting initial credentials
Hi list, kinit (krb5 1.4.2) on an AIX 5.3 gives me # /usr/local/bin/kinit -k -t foobar.keytab foobar/foo.example.net@EXAMPLE.NET kinit(v5): Cannot resolve network address for KDC in requested realm while getting initial credentials From a working Linux krb5 1.4.2 installation I copied /etc/krb5.conf and foobar.keytab to AIX 5.3. The following steps don't defer to the steps I did under Linux. # ./configure --without-krb4 --enable-shared # make && make install Using gcc 3.3.2. I found a patch for krb5 1.4.1 for AIX 5.2 from Ken Raeburn, but as far as I see it is fixed in 1.4.2. My krb5.conf looks like this: [libdefaults] default_realm = EXAMPLE.NET clockskew = 300 [realms] EXAMPLE.NET = { kdc = foo.example.net:88 admin_server = foo.example.net:749 default_domain = example.net kpasswd_server = foo.example.net } [domain_realm] .example.net = EXAMPLE.NET example.net = EXAMPLE.NET [logging] default = SYSLOG:NOTICE:DAEMON kdc = FILE:/var/log/kdc.log kadmind = FILE:/var/log/kadmind.log [appdefaults] pam = { ticket_lifetime = 1d renew_lifetime = 1d forwardable = true proxiable = false retain_after_close = false minimum_uid = 0 debug = false } Trying to analyze with tcpdump I s...

Re: AIX 5.3: kinit(v5): Cannot resolve network address for KDC in requested realm while getting initial credentials
Christopher, I had the exact same problem. I was given 2 patches for KRB 1.4.1 and it fixed the problem. I applied the patches to my 1.4.2 source and the problem is resolved there too. Here are the patches: DNSGLUE.C Patch: *** ./src/lib/krb5/os/dnsglue.c.orig Fri Jan 14 17:10:53 2005 --- ./src/lib/krb5/os/dnsglue.c Thu May 5 11:39:52 2005 *************** *** 62,68 **** --- 62,76 ---- char *host, int nclass, int ntype) { #if HAVE_RES_NSEARCH + #ifndef LANL struct __res_state statbuf; + #else /* LANL */ + #ifndef _AIX + struct __res_state statbuf; + #else /* _AIX */ + struct { struct __res_state s; char pad[1024]; } statbuf; + #endif /* AIX */ + #endif /* LANL */ #endif struct krb5int_dns_state *ds; int len, ret; LOCATE_KDC.C Patch: >*** ./src/lib/krb5/os/locate_kdc.c.orig Thu May 5 08:06:45 2005 >--- ./src/lib/krb5/os/locate_kdc.c Thu May 5 11:34:27 2005 >*************** >*** 267,275 **** >--- 267,283 ---- > memset(&hint, 0, sizeof(hint)); > hint.ai_family = family; > hint.ai_socktype = socktype; >+ #ifndef LANL > #ifdef AI_NUMERICSERV > hint.ai_flags = AI_NUMERICSERV; > #endif >+ #else /* LANL */ >+ #ifndef _AIX >+ #ifdef AI_NUMERICSERV >+ hint.ai_flags = AI_NUMERICSERV; >+ #endif >+ #endif /* _AIX */ >+ #endif /* LANL */ > sprintf(portbuf, "%d", ntohs(port)); > sprintf(s...

MIT Kerberos: Cannot resolve network address for KDC in realm
Hi: I've been having a hard time getting MIT Kerberos up and running on solaris 10. The latest of my problems is this error when i run kinit from the KDC. dsldap01$ /krb5/bin/kinit rob/admin@alezeo.com kinit(v5): Cannot resolve network address for KDC in realm alezeo.com while getting initial credentials This sounds like a DNS problem, but I don't think it is. dsldap01$ host -t A dsldap01.alezeo.com dsldap01.alezeo.com has address 10.93.120.72 Also in my hosts file: 127.0.0.1 localhost 10.93.120.72 dsldap01.alezeo.com dsldap01 loghost Here is my krb5.conf ============= [libdefaults] dns_lookup_realm = false default_realm = ALEZEO.COM ticket_lifetime = 600 kdc_req_checksum_type = 2 checksum_type = 2 ccache_type = 1 default_tkt_enctypes = des-cbc-crc default_tgs_enctypes = des-cbc-crc [kdc] profile = /krb5/var/krb5kdc/kdc.conf [logging] default = FILE:/var/krb5/kdc.log kdc = FILE:/var/krb5/kdc.log admin_server = FILE:/var/krb5/adm.log [realms] ALEZEO.COM = { kdc = dsldap01.alezeo.com:88 admin_server = dsldap01.alezeo.com:749 default_domain = alezeo.com } [domain_realm] .alezeo.com = ALEZEO.COM alezeo.com = ALEZEO.COM [login] krb4_convert = 0 Here is my kdc.conf ============ [kdcdefaults] kdc_ports = 88 [realms] alezeo.com = { ...

samba+kerberos "cannot resolve network address for KDC in requested realm"
Hi, i'm quite new on kerberos and samba so i hope my question is not so stupid and i hope somebody could help me. I'm trying to join a linux machine (3.0.14a-Debian) to a W2K3 domain a member . I would like to have ads security on it but i dont know why i get this message "cannot resolve network address for KDC in requested realm" when i try "net ads join -U myuser%mypassword". Maybe i did not give u enough information to know what's the problem. Thank's in advance --------------------------------- LLama Gratis a cualquier PC del Mundo. Llamadas a fijos y m�viles desde 1 c�ntimo por minuto. http://es.voice.yahoo.com ________________________________________________ Kerberos mailing list Kerberos@mit.edu https://mailman.mit.edu/mailman/listinfo/kerberos ...

joining netbsd 1.6.1 (heimdal-0.4e-nb2) to MIT kdc on linux (krb5-1.3.5) error
Hello, I get following errors when trying set up kerberos on netbsd 1.6.1 system: netb# kadmin kadmin> list princs root/admin@SWAMP.RU's Password: ---if wrong password given, it prints "get princs: Incorrect password"and give up, if the password matches than kadmin sleep forever on READ call, (from ktrace/kdump output)... Configuration of realm is simple: main kdc on linux with MIT krb5-1.3.5, there are some other linux system on net, successfuly using kerberos in auth to telnet, ftp services, /etc/krb5.conf on systems are exactly identical. Is it version incompability or config error? What should I do - I think install mit krb on this system surely help, but is there other ways, some people told me that heimdal totally compatible with MIT, is it right? I'am almost totally new in using kerberos, any help appreciated. Thanks in advance :-) Vladimir. ...

Cannot resolve network address for KDC in requested realm while
Dear sir, When I join the windows 2003 domain using the command kinit, while I am getting the error "cannot resolve network address for KDC is requested realm while getting initial credentials" Another one when I join the windows 2003 domain using the command " net ads join -U administrator" I am getting following error "utils/net_ads.c:ads_startup(186) ads_connect:No such file (or) directory" So kindly send the mail How to rectify this problem. With Regards R.Balaji ________________________________________________ Kerberos mailing list Kerberos@mit.edu https://mailman.mit.edu/mailman/listinfo/kerberos ...

Browser speed test: IE, 59.7; FF3.03, 11.3; Chrome, 3.6; FF 3.1 Beta, 2.6
<Quote> ....there's a new Web speed-demon, Firefox 3.1 beta 1. [Slowed down by debug code...Turning on TraceMonkey...] Speaking of speed, let's get down to the numbers. I installed Firefox 3 Beta 1 on an older Gateway 503GR. This PC uses a 3GHz Pentium IV CPU, 2GB of RAM, an ATI Radeon 250 graphics card, and a 300GB SATA (Serial Advanced Technology Attachment) hard drive. On this, I was running XP SP3. I also ran Firefox 3 Beta 1 on my main openSUSE 11 PC, but since Chrome still doesn't run natively on Linux, I tested both browsers on the XP computer. I then put both brows...

KRB5 1.4 vs. KRB5 1.3.6 on AIX 5.2
I was hoping someone might be able to help me fix an issue I have encountered. I tested KRB5 1.3.6 on AIX 5.2 using C for AIX and the installed make. Created a krb5.conf and krb5.keytab to talk to a Windows 2k AD Domain Controller. Had no issues, connected and received tickets fine. I recently installed KRB5 1.4 on the same machine after removing the 1.3.6 footprint. I encountered an issue seen by others with the error: "Syntax error at line 1 : `(' is not matched" when using AIX's make; but it seems to work fine using GNU Make. After compiling and doing a make install, I consistently receive the following message when using kinit while using the same keytab and configuration as 1.3.6: "Cannot resolve network address for KDC in requested realm while getting initial credentials" Is there a significant change to krb5.conf between 1.3.6 and 1.4 ? The binaries seem to work fine; but it does not look like it is even looking at the krb5.conf file. I can change the name or move it and the message stays the same. I have tried disabling DNS for realm and kdc; put master_kdc in the entries; but still does not even act like it is looking at this file. Any help is greatly appreciated. Lamar Saxon Lamar.Saxon@americredit.com Lead Server Engineer 817-525-7122 //AmeriCredit 4001 Embarcadero Arlington ,TX 76014 Privileged and Confidential. This e-mail, and any attachments there to, is intended only for use by the addressee(s) named herein and...

[News] Firefox 3.1 Beta Released; Reviews of 3.0 and 3.1 Beta
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Firefox 3.1 beta 1 released and reviewed ,----[ Quote ] | Mozilla has released Firefox 3.1 Beta 1, the first official development | release of the next update to Firefox 3 just about four months after its | release past June. `---- http://mozillalinks.org/wp/2008/10/firefox-31-beta-1-released-and-reviewed/ Browser Review: Mozilla Firefox 3 ,----[ Quote ] | By some estimates, more than 1.4 billion people use the Internet for work, | entertainment, or commerce. All of those web surfers must use a browser to | visit websites or shop at onli...

Please explain PS3.3-6.1.1 and PS3.3-6.1.2
PS3.3-6.1.1 reads: ...When an instance of a Composite IOD is communicated, this entire context is exchanged between Application Entities.... PS3.3-6.1.2 reads: ...When an instance of a Normalized IOD is communicated, the context for that instance is not actually exchanged. Instead, the context is provided through the use of pointers to related Normalized IOD instances. If I understand it correctly, 6.1.1 says the composite object has all the info needed to fully understand the IOD. But I can't quite figure out what 6.1.2 is saying. By a "Pointer", Is it saying that where related data is indicated, you will find data that identifies another, normalized IOD - like a foreign key in a Normalized database? If so, what will that ID look like? Is it a UID? (Would make sense because otherwise, how would the SCP be able to look this IOD up?) Or am I totally missing the point? sendjunktodp@hotmail.com (Mr. P) wrote in message news:<8cba616e.0410181142.1dfefb14@posting.google.com>... > PS3.3-6.1.1 reads: ...When an instance of a Composite IOD is > communicated, this entire context is exchanged between Application > Entities.... > > PS3.3-6.1.2 reads: ...When an instance of a Normalized IOD is > communicated, the context for that instance is not actually exchanged. > Instead, the context is provided through the use of pointers to > related Normalized IOD instances. > > If I understand it corr...

RE: KRB5 1.4 vs. KRB5 1.3.6 on AIX 5.2
The compile with CC works with no issues. The other issue still remains. "Cannot resolve network address for KDC in requested realm while getting initial credentials" I tried kinit with the -k and verbose; but not with a password. I will post the results once I get it accomplished. Thanks, Lamar -----Original Message----- From: Tom Yu [mailto:tlyu@MIT.EDU] Sent: Thursday, April 21, 2005 2:18 PM To: Saxon, Lamar Cc: kerberos@mit.edu Subject: Re: KRB5 1.4 vs. KRB5 1.3.6 on AIX 5.2 >>>>> "Lamar" == <Lamar.Saxon@americredit.com> writes: Lamar> I tested KRB5 1.3.6 on AIX 5.2 using C for AIX and the installed make. Lamar> Created a krb5.conf and krb5.keytab to talk to a Windows 2k AD Domain Lamar> Controller. Had no issues, connected and received tickets fine. Lamar> I recently installed KRB5 1.4 on the same machine after removing the Lamar> 1.3.6 footprint. I encountered an issue seen by others with the error: Lamar> "Syntax error at line 1 : `(' is not matched" Lamar> when using AIX's make; but it seems to work fine using GNU Make. This was ticket #2992, which will be fixed in the upcoming krb5-1.4.1 release. Lamar> After compiling and doing a make install, I consistently receive the Lamar> following message when using kinit while using the same keytab and Lamar> configuration as 1.3.6: Lamar> "Cannot resolve network address for KDC in requested realm while getting...

KRB5 1.4 vs. KRB5 1.3.6 on AIX 5.2 (fwd)
I have done some research on this problem. The host resolve code does not complete successfully. I have traced the error to the routine at /kerberos/mit/krb5-1.4/src/lib/krb5/os/dnsglue.c. In the routine a call is made to res_ninit to provide dns information for the kdc. res_ninit updates the structure at statbuf but overlays memory 72 bytes past the structure boundary. I have opened a problem with IBM on res_ninit. The problem is not yet resolved but IBM suggested using a malloc for the structure instead of static storage. I am trying to get IBM to correct the error in res_ninit. No resoultion yet. >Delivery-Date: Thu, 21 Apr 2005 12:15:05 -0600 >Return-Path: <owner-kerberos@lanl.gov> >X-Original-To: hgm@localhost.localdomain >Delivered-To: hgm@localhost.localdomain >Received: from localhost (localhost.localdomain [127.0.0.1]) > by moki.lanl.gov (Postfix) with ESMTP id 15AAB68739 > for <hgm@localhost.localdomain>; Thu, 21 Apr 2005 12:15:05 -0600 > (MDT) >Received: from ccn-mail.lanl.gov [128.165.4.105] > by localhost with POP3 (fetchmail-6.2.5) > for hgm@localhost.localdomain (single-drop); Thu, 21 Apr 2005 > 12:15:05 -0600 >(MDT) >Received: from ccn-mail.lanl.gov ([unix socket]) > by ccn-mail.lanl.gov (Cyrus v2.2.3-Red Hat 2.2.3-6.lanl) with > LMTP; Thu, 21 >Apr 2005 12:11:13 -0600 >X-Sieve: CMU Sieve 2.2 >Received: from mailrelay3.lanl.gov (mail...

RE: KRB5 1.4 vs. KRB5 1.3.6 on AIX 5.2 #2
Downloaded KRB5 1.4.1 and the installation worked great with GCC and AIX make. None of the problems that were encountered with 1.4.0 and the unbalanced "(". The problem with: /usr/local/kerberos/bin/kinit -V kinit(v5): Cannot resolve network address for KDC in requested realm while getting initial credentials still exist. If I force it to version 4 KRB it seems to work with the krb5.conf: /usr/local/kerberos/bin/kinit -4 xxxxxxx Password for xxxxxx@xxx.xxxxxxxxxx.xxx: kinit(v4): Can't send request (send_to_kdc) The krb5.conf file is the same file that worked with the 1.3.6 version of KRB5. It does not seem to work with KRB 1.4 or 1.4.1. Any one having similar problems or solutions ? Thanks, Lamar -----Original Message----- From: Saxon, Lamar Sent: Monday, April 25, 2005 11:08 AM To: 'Tom Yu' Cc: kerberos@mit.edu Subject: RE: KRB5 1.4 vs. KRB5 1.3.6 on AIX 5.2 The compile with CC works with no issues. The other issue still remains. "Cannot resolve network address for KDC in requested realm while getting initial credentials" I tried kinit with the -k and verbose; but not with a password. I will post the results once I get it accomplished. Thanks, Lamar -----Original Message----- From: Tom Yu [mailto:tlyu@MIT.EDU] Sent: Thursday, April 21, 2005 2:18 PM To: Saxon, Lamar Cc: kerberos@mit.edu Subject: Re: KRB5 1.4 vs. KRB5 1.3.6 on AIX 5.2 >>>>> "Lamar" == <Lamar.Saxon@americredit.com> writes: La...

RE: KRB5 1.5 or 1.6 compiled on AIX 5.2/5.3 #6
Wasn't really the solution I came up with; but it worked. You might be correct since now the OpenSSL binaries will not build against the Kerberos libraries currently. libssl and libcrypto build fine along with everything else; but the actual openssl binary fails. Phil, Have you successfully linked OpenSSL with the new Kerberos libraries ? Thanks, Lamar -----Original Message----- From: Sam Hartman [mailto:hartmans@mit.edu] Sent: Friday, February 09, 2007 10:18 AM To: Saxon, Lamar Cc: pgp@psu.edu; kerberos@MIT.EDU Subject: Re: KRB5 1.5 or 1.6 compiled on AIX 5.2/5.3 Do you really want rtl as a linker flag? Isn't that going to be an issue for people linking against the kerberos libraries. Why is that the right solution? Privileged and Confidential. This e-mail, and any attachments there to, is intended only for use by the addressee(s) named herein and may contain privileged or confidential information. If you have received this e-mail in error, please notify me immediately by a return e-mail and delete this e-mail. You are hereby notified that any dissemination, distribution or copying of this e-mail and/or any attachments thereto, is strictly prohibited. ________________________________________________ Kerberos mailing list Kerberos@mit.edu https://mailman.mit.edu/mailman/listinfo/kerberos ...

RE: KRB5 1.5 or 1.6 compiled on AIX 5.2/5.3 #3
Thanks. The problem also exist using GNU ld on AIX too. See below: make[2]: Entering directory `/usr/sys/inst.images/MIT-Kerberos/krb5-1.6/5.3/src/lib/rpc' making all in lib/rpc/unit-test... make[3]: Entering directory `/usr/sys/inst.images/MIT-Kerberos/krb5-1.6/5.3/src/lib/rpc/unit-test' cc -L../../../lib -blibpath:/usr/local/kerberos/lib::/usr/lib:/lib -g -qhalt=e -O -D_THREAD_SAFE -o client client. o rpc_test_clnt.o \ -lgssrpc -lgssapi_krb5 -lkrb5 -lk5crypto -lcom_err -lkrb5support -lpthreads ld: 0706-006 Cannot find or open library file: -l k5crypto ld:open(): No such file or directory ld: 0706-006 Cannot find or open library file: -l com_err ld:open(): No such file or directory ld: 0706-006 Cannot find or open library file: -l krb5support ld:open(): No such file or directory make[3]: *** [client] Error 255 make[3]: Leaving directory `/usr/sys/inst.images/MIT-Kerberos/krb5-1.6/5.3/src/lib/rpc/unit-test' make[2]: *** [all-recurse] Error 1 make[2]: Leaving directory `/usr/sys/inst.images/MIT-Kerberos/krb5-1.6/5.3/src/lib/rpc' make[1]: *** [all-recurse] Error 1 make[1]: Leaving directory `/usr/sys/inst.images/MIT-Kerberos/krb5-1.6/5.3/src/lib' make: *** [all-recurse] Error 1 root@aoctoolbox:/usr/sys/inst.images/MIT-Kerberos/krb5-1.6/5.3/src:> whence ld /usr/local/bin/ld root@aoctoolbox:/usr/sys/inst.images/MIT-Kerberos/krb5-1.6/5.3/src:> ld -v GNU ld version 2.16 Lamar -----Original Message----- From: Russ Al...

Cannot resolve network address for KDC in requested realm while getting initial credentials
On Red Hat linux 2.4.9 krb5-devel-1.2.2-24 krb5-libs-1.2.2-24 krb5-server-1.2.2-24 krb5-workstation-1.2.2-24 running everything on the local host I can run kinit.just fine: kinit test Password for test@host.COM: I can create a keytab file: kadmin.local: ktadd -k /var/kerberos/krb5kdc/kadm5test test Entry for principal test with kvno 5, encryption type Triple DES cbc mode with HMAC/sha1 added to keytab WRFILE:/var/kerberos/krb5kdc/kadm5test. Entry for principal test with kvno 5, encryption type DES cbc mode with CRC-32 added to keytab WRFILE:/var/kerberos/krb5kdc/kadm5test. However, I can't kinit using this keytab file: [root@host/var/kerberos/krb5kdc]$ kinit -k kadm5test kinit(v5): Cannot resolve network address for KDC in requested realm while getting initial credentials klist shows: [root@bde-idm3 /var/kerberos/krb5kdc]$ klist Ticket cache: FILE:/tmp/krb5cc_0 Default principal: test@BDE-IDM3.US.ORACLE.COM Valid starting Expires Service principal 01/20/05 14:53:59 01/21/05 00:53:59 krbtgt/HOST.COM@HOST.COM Kerberos 4 ticket cache: /tmp/tkt0 klist: You have no tickets cached A secondary problem is now the password seems to have been changed after creating the keytab, and I can no longer kinit (without the keytab): [root@host /var/kerberos/krb5kdc]$ kinit test Password for test@host.US.ORACLE.COM: kinit(v5): Password incorrect while getting initial credentials For testing purposes I'm using my hostname as my realm name. I&#...

Problem installing matplotlib 1.3.1 with Python 2.7.6 and 3.3.3 (release candidate 1)
Hello, I tried to install matplotlib 1.3.1 on the release candidates of Python 2.7.6 and 3.3.3. I am on Mac OS X 10.6.8. Although the installation gave no problems, there is a problem with Tcl/Tk. The new Pythons have their own embedded Tcl/Tk, but when installing matplotlib it links to the Frameworks version of Tcl and TK, not to the embedded version. This causes confusion when importing matplotlib.pyplot: objc[70648]: Class TKApplication is implemented in both /Library/Frameworks/Python.framework/Versions/2.7/lib/libtk8.5.dylib and /Library/Frameworks/Tk.framework/Versions/8.5/Tk. One of the two will be used. Which one is undefined. objc[70648]: Class TKMenu is implemented in both /Library/Frameworks/Python.framework/Versions/2.7/lib/libtk8.5.dylib and /Library/Frameworks/Tk.framework/Versions/8.5/Tk. One of the two will be used. Which one is undefined. objc[70648]: Class TKContentView is implemented in both /Library/Frameworks/Python.framework/Versions/2.7/lib/libtk8.5.dylib and /Library/Frameworks/Tk.framework/Versions/8.5/Tk. One of the two will be used. Which one is undefined. objc[70648]: Class TKWindow is implemented in both /Library/Frameworks/Python.framework/Versions/2.7/lib/libtk8.5.dylib and /Library/Frameworks/Tk.framework/Versions/8.5/Tk. One of the two will be used. Which one is undefined. And then later it gives a lot of error messages. So I think it should be linked to the embedded version. For this the matplotlib setupext.py should be ad...

PIX 6.3(1) to 6.3(5) to 7.2(1)
I wanted to find a simple list of feature benefits of upgrading to the above PIX version, but just found the list of bug fixes & nothing in plain english that I can communicate with my client. Is there anywhere on ciscos home page that has the feature changes in plain english. ie. Your on version 6.3(1) so upgrading to 6.3(5) you will get this. Then if you upgrade to 7.2(1) you will be able to do this. You may wish to investigate: New Features: http://www.cisco.com/en/US/products/sw/secursw/ps2120/products_upgrade_guides09186a0080369ee2.html#wp1482875 Hope this helps. Brad...

Transferring Eudora Addresses from older mac using OS 8.6 and Eudora 5.1 to new iMac using Panther !0.3 and Eudora 6.1
I have looked at all items on the strings appropriate or close to this problem back to May2004 with no useful input. I saved my old Eudora folder from my old machine on to a CD. I then loaded this into the new iMac and copied the Eudora Folder (not the applications folder) on to the desktop thinking Eudora 6.1 would see it and do the business. I had previously loaded up Eudora 6.1 (which seems to be working perfectly in all other aspects) and when it asked if I wanted to import infor from another application I said yes to..."from other". ( Eudora is not among these that it lists) It says it can't find it. I then put my old folder into Applications>documents but when I started up Eudora it asked again if I wanted to import but wouldn't or wasn't able. Noting the points in an older question I repeated this exercise but this time from Home>documents. Still no joy. Help Please reply to my email address above if possible. I'm new to user groups Iain Mundell <iainmundell@macunlimited.net> wrote: > I saved my old Eudora folder from my old machine on to a CD. I then > loaded this into the new iMac and copied the Eudora Folder (not the > applications folder) on to the desktop thinking Eudora 6.1 would see > it and do the business. Did you copy it to the CD in Mac format, or was the CD set to be PC compatible? If the latter, it will have lost the Mac information it needs (the resource for...

Krb5-1.3.6 on AIX 5.3
Any helpful person, I have compiled a vanilla (--without-krb4 --enable-dns) 1.3.6 on AIX 5.3 using gcc 3.3.2 without any issues. However neither kshd and klogind seem to work (everything else works perfectly). Krlogin to that server gives select errors. Any ideas? Thank You, Martin >krlogin myserver klogind: select: Bad file number. Connection closed. /* It fails just below on select */ Krlogind.c (line1048) if (select(8*sizeof(ibits), &ibits, &obits, &ebits, 0) < 0) { if (errno == EINTR) continue; fatalperror(f, "select"); ________________________________________________ Kerberos mailing list Kerberos@mit.edu https://mailman.mit.edu/mailman/listinfo/kerberos ...

Kerberos for Windows 3.1 Beta 1 is available
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 The MIT Kerberos Development Team is proud to announce the first *BETA* release of the next revision of our Kerberos for Windows product, Version 3.1. Please send bug reports and feedback to kfw-bugs@mit.edu. What's New: =========== Version 3.1 fixes bugs and adds minor functionality: * Improvements to the Network Identity Manager 1. A serious memory leak has been fixed 2. Principal names containing numbers are no longer considered invalid 3. Locales other than en_US are now supported 4. Arbitrary sort ordering of credentials 5. Support for FILE: ccaches 6. Credential properties may be selected by the user for display 7. User selected font support 8. Tool Tip support added to the Toolbar 9. Identities can be added without obtaining credentials 10. Kerberos 5 Realm editor has been added * The MSLSA: ccache is disabled in WOW64 environments prior to Microsoft Windows Vista Beta 2 * The installers are built using the latest toolkit versions NSIS (2.18) and WIX (2.0.4220.0) Version 3.0 provided several often requested new features: * thread-safe Kerberos 5 libraries (provided by Kerberos 5 release 1.4.3) * a replacement for the Leash Credential Manager called the Network Identity Manager - a visually enticing application that takes advantage of all of the modern XP style User Interface enhancements - supp...

Re: [TCPware V5.6-2,KERBEROS V2.1-72,VMS V7.3-2] TCPIP$IPC_SHR SHRIDMISMAT
At 03:10 PM 8/19/2005, Peter 'EPLAN' LANGSTOEGER wrote: >In article <6.1.2.0.2.20050819133657.023ebc48@raptor.psccos.com>, Dan >O'Reilly <dano@process.com> writes: > >Peter - > > > >At this time, you can't use Kerberos V2.1-72 on a TCPware system, so you'll > >have to regress back to the previous version (2.0-6). We're working on > >getting an ECO together to allow this, but it will be at least a week or > two, > >if not longer. > >Ok. In the meantime I found out that I already had this problem in Feb 200...

Corupted address book in ver 6.1.1.3
Cannot access address book - get nessage "Invalid address xxxxxxx Quotes and/or parentheses don't match" Cannot exit error message have to end task and restart Eudora. Any ideas anyone? Eyedubbya wrote: >Cannot access address book - get nessage "Invalid address xxxxxxx >Quotes and/or parentheses don't match" >Cannot exit error message have to end task and restart Eudora. >Any ideas anyone? > > Maybe knowing that the addressbook is just a text file, NNdbase.txt, will help. Edit it with Eudora closed, and delete the NNdbase.toc. Back them up first. Rick -- Why is it that rain drops but snow falls? On Tue, 13 Jul 2004 17:10:40 -0700, Eyedubbya <irichard@intergate.ca> wrote: >Cannot access address book - get nessage "Invalid address xxxxxxx >Quotes and/or parentheses don't match" >Cannot exit error message have to end task and restart Eudora. >Any ideas anyone? I just ran into the same problem when upgrading to the latest version of Eudora. I opened the NNDbase.txt file with Notepad and discovered that some addresses were missing one or both commas that are supposed to surround the nickame. Replacing the missing commas cured the problem. Paul Goelz Rochester Hills, Michigan USA Eyedubbya <irichard@intergate.ca> wrote: > Cannot access address book - get nessage "Invalid address xxxxxxx > Quotes and/or parentheses don't match...

Errors getting wine 1.1.6 with Debian Lenny
Hi everyone, So I'm trying to get the latest version of Wine and I'm getting the following errors when I run apt-get update. Here's what I did: 1. wget http://wine.budgetdedicated.com/apt/sources.list.d/lenny.list - O /etc/apt/sources.list.d/winehq.list 2. apt-get update W: Failed to fetch http://wine.budgetdedicated.com/apt/dists/lenny/main/binary-amd64/Packages.gz 404 Not Found [IP: 81.171.111.184 80] W: Failed to fetch http://wine.budgetdedicated.com/apt/dists/lenny/main/source/Sources.gz 404 Not Found [IP: 81.171.111.184 80] E: Some index files failed to down...

Web resources about - krb5 1.6 beta 3 on Debian Lenny : kinit(v5): Cannot resolve network address for KDC in realm - comp.protocols.kerberos

Resources last updated: 3/10/2016 1:53:08 PM