Questions tagged [kinit]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
1
vote
1answer
82 views

Microsoft Active Directory kerberos returns unknown principal

I m trying to authenticate the host for kbr5p nfs mount where Microsoft active directory is acting as the Kerberos server. sudo kinit -k -t /etc/krb5.keytab host/ROBODAROBODA@EXAMPLE.COM kinit: ...
0
votes
1answer
306 views

RHEL: Getting current kerberos/Kinit user ID after login?

I am connecting by SSH to a RHEL6 server. When I SSH into the box, I am challenged for my linux username/password (which is a shared account) username: mySharedLinuxUser pass for mySharedLinuxUser:...
1
vote
1answer
980 views

Windows kinit kerberos connection fails with ICMP Port Unreachable

I'm trying to connect to a kerberos server with a keytab: kinit -k -t securitytest.keytab securitytest@RRRR.COM Exception: ICMP Port Unreachable java.net.PortUnreachableException: ICMP Port ...
0
votes
1answer
331 views

Linux ksu (kerberized super user) command fails to use cached service (host) tickets

Questions at the end About my environment I have tried in two different environments: (i) Linux Ubuntu 16.04LTS server enrolled in Active Directory (Microsoft) Domain and (ii) Linux Ubuntu 16.04LTS ...
1
vote
1answer
2k views

How can I setup automatic renewal for Kerberos tickets and make the ticket life longer, in an OSX Server mail server

I have to renew tickets manually in my server terminal for users to have access to their mail accounts. I am using kerberos as a login authentication to access a local mail server. My local machine ...
-1
votes
2answers
581 views

Restricting Kerberos Credential Cache to session

Currently we are using a very bad access model to our servers. Every person logs in via ssh to the same unix user. We have several keytabs which are used by everyone and normally the same keytab is ...
2
votes
1answer
18k views

kinit pre-authentication fails

I have a CentOS 6.4 that someone set up a while back. The admin is not sure how he installed it, but it works very well with Kerberos. I used authconfig to set the domain and the Kerberos settings. ...
1
vote
2answers
15k views

How to clear kerberos config

I am setting my machine as a kerberos client. I have a question on how the kerberos config file actually take effect and how to clear its effect. My experiment is as follow. Step 1, without editing ...
1
vote
0answers
829 views

kinit error: Realm not local to KDC, DC is in a subdomain

I have a user: oneuser@EXEMPLE.COM as principal and the next krb5.conf: [libdefaults] default_realm = EXEMPLE.COM default_tkt_enctypes = arcfour-hmac-md5 default_tgs_enctypes = arcfour-...
1
vote
0answers
2k views

Mysterious kinit-failure on Debian Jessie

I have a machine with the Samba 4 AD and the second as a client. After two days of good operation, suddenly the kinit stopped working on the client-side. The reason is quite mysterious. It cannot ...
1
vote
0answers
835 views

Kerberos Service Principal not found in AD

I've got a strange problem with an Active Directory SPN Account. This does not work: kinit HTTP/my.host.com@MY.REALM However, "setspn -l SA_MyUser" lists "HTTP/my.host.com" as registered service ...
13
votes
8answers
142k views

Kinit Won't Connect to a Domain Server : Realm not local to KDC while getting initial credentials

I am setting up a testbed environment where Linux (Ubuntu 10.04) clients will authenticate to a Windows Server 2008 R2 Domain Server. I am following the official Ubuntu guide to set up a Kerberos ...
1
vote
1answer
445 views

Booting Debian5 (Lenny) on 2.6.16 Kernel

Due to a proprietary kernel module that I don't have the source to and is very picky about what kernel versions it will load into (even with modprobe --f), I find myself in need of running a 2.6.16.XX ...