Return-Path: X-Original-To: apmail-directory-dev-archive@www.apache.org Delivered-To: apmail-directory-dev-archive@www.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id 97B08F2AB for ; Tue, 7 May 2013 20:55:41 +0000 (UTC) Received: (qmail 60015 invoked by uid 500); 7 May 2013 20:55:41 -0000 Delivered-To: apmail-directory-dev-archive@directory.apache.org Received: (qmail 59959 invoked by uid 500); 7 May 2013 20:55:41 -0000 Mailing-List: contact dev-help@directory.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: "Apache Directory Developers List" Delivered-To: mailing list dev@directory.apache.org Received: (qmail 59951 invoked by uid 99); 7 May 2013 20:55:41 -0000 Received: from nike.apache.org (HELO nike.apache.org) (192.87.106.230) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 07 May 2013 20:55:41 +0000 X-ASF-Spam-Status: No, hits=-2.8 required=5.0 tests=HTML_MESSAGE,RCVD_IN_DNSWL_HI,SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (nike.apache.org: domain of James.C.Wu@disney.com designates 204.128.192.17 as permitted sender) Received: from [204.128.192.17] (HELO msg1.disney.com) (204.128.192.17) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 07 May 2013 20:55:32 +0000 Received: from int1.disney.pvt (int1.disney.pvt [153.7.110.9]) by msg1.disney.com (Sentrion-MTA-4.2.2/Sentrion-MTA-4.2.2) with ESMTP id r47KtAYh031526 for ; Tue, 7 May 2013 20:55:10 GMT Received: from sm-cala-xht03.swna.wdpr.disney.com (SM-CALA-XHT03.swna.wdpr.disney.com [153.7.248.18]) by int1.disney.pvt (Sentrion-MTA-4.2.2/Sentrion-MTA-4.2.2) with ESMTP id r47Ksjg7016033 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL) for ; Tue, 7 May 2013 20:55:10 GMT Received: from sm-cala-vxmb06a.swna.wdpr.disney.com ([fe80::8920:73be:eaf5:e3af]) by sm-cala-xht03.swna.wdpr.disney.com ([2002:9907:f812::9907:f812]) with mapi; Tue, 7 May 2013 13:54:58 -0700 From: "Wu, James C." To: Apache Directory Developers List Date: Tue, 7 May 2013 13:54:56 -0700 Subject: RE: kinit with keytab failed Thread-Topic: kinit with keytab failed Thread-Index: Ac5LTS9uAuxYBRrsSj+n023wAWTzIQAF5CQw Message-ID: <7D664BE6CF058A4CB1A06984A7AA678F1808032F63@SM-CALA-VXMB06A.swna.wdpr.disney.com> References: <7D664BE6CF058A4CB1A06984A7AA678F1808032D51@SM-CALA-VXMB06A.swna.wdpr.disney.com> In-Reply-To: <7D664BE6CF058A4CB1A06984A7AA678F1808032D51@SM-CALA-VXMB06A.swna.wdpr.disney.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: acceptlanguage: en-US Content-Type: multipart/alternative; boundary="_000_7D664BE6CF058A4CB1A06984A7AA678F1808032F63SMCALAVXMB06A_" MIME-Version: 1.0 X-Flow-Control: Sendmail Flow Controller v2.2.5 int1.disney.pvt r47Ksjg7016033 X-Flow-Control-Info: class=Exchange rcpts=1 size=8116 X-Virus-Checked: Checked by ClamAV on apache.org --_000_7D664BE6CF058A4CB1A06984A7AA678F1808032F63SMCALAVXMB06A_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable It is my bad. I think I did not enter the password correctly.I guess I have= to type more slowly:). I wish ktutil can check the validity of password. james From: dev-return-43116-James.C.Wu=3Ddisney.com@directory.apache.org [mailto= :dev-return-43116-James.C.Wu=3Ddisney.com@directory.apache.org] On Behalf O= f Wu, James C. Sent: Tuesday, May 07, 2013 11:15 AM To: dev@directory.apache.org Subject: kinit with keytab failed Hi Guys, I am trying to get kinit with a keytab file working when using ApacheDS as= Kerberos server. However I could not get it to work on both the same host = of ApacheDS server and on the client. Ironically, I got different error mes= sage in the two cases. On the apacheDS host [cloud-user@n7-z01-0a2a0c3a ~]$ ktutil ktutil: addent -password -p FOO@EXAMPLE.COM -k 0 -= e des-cbc-md5 Password for FOO@EXAMPLE.COM: ktutil: wkt temp.keytab ktutil: q [cloud-user@n7-z01-0a2a0c3a ~]$ kinit -k -t temp.keytab FOO@EXAMPLE.COM kinit: Generic preauthentication failure while getting initial credentials On the client host: [cloud-user@n7-z01-0a2a046d ~]$ ktutil ktutil: addent -password -p FOO@EXAMPLE.COM -k 0 -= e des-cbc-md5 Password for FOO@EXAMPLE.COM: ktutil: wkt temp.keytab ktutil: q [FOO@n7-z01-0a2a046d ~]$ kinit -k -t ./temp.keytab FOO@EXAMPLE.COM kinit: Key table entry not found while getting initial credentials I looked at the configuration of the apacheds, des-cbc-md5 is one of the en= cryption types that it supports. Normal kinit FOO@EXAMPLE.COM works on both the apacheds host and the client. Regards, james James --_000_7D664BE6CF058A4CB1A06984A7AA678F1808032F63SMCALAVXMB06A_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

It is my bad. I think I did not enter the password corre= ctly.I guess I have to type more slowlyJ= .  I wish ktutil can check the validity of password.=

 

ja= mes

 

From:= dev= -return-43116-James.C.Wu=3Ddisney.com@directory.apache.org [mailto:dev-retu= rn-43116-James.C.Wu=3Ddisney.com@directory.apache.org] On Behalf Of = Wu, James C.
Sent: Tuesday, May 07, 2013 11:15 AM
To: d= ev@directory.apache.org
Subject: kinit with keytab failed

 

Hi Guys,

 

I am trying to get kinit with a keytab file worki= ng when using  ApacheDS as Kerberos server. However I could not get it= to work on both the same host of ApacheDS server and on the client. Ironic= ally, I got different error message in the two cases.

 

On the apacheDS hos= t

 

[cloud-user@n7-z01-0a2a0c3a ~]$ ktutil

ktutil:  addent -password -p FO= O@EXAMPLE.COM -k 0 -e des-cbc-md5

Pa= ssword for FOO@EXAMPLE.COM:

ktutil:  wkt temp.keytab

ktutil:  q

[cloud= -user@n7-z01-0a2a0c3a ~]$ kinit -k -t temp.keytab FOO@EXAMPLE.COM

kinit: Gen= eric preauthentication failure while getting initial credentials=

 

&nb= sp;

On the client host:

 

[cloud-user@n7-z01-= 0a2a046d ~]$ ktutil

ktutil:  addent= -password -p FOO@EXAMPLE.COM -k 0 -= e des-cbc-md5

Password for FOO@EXAMPLE.COM:

ktutil:   wkt temp.keytab

k= tutil:  q

[FOO@n7-z01-0a2a046d ~]$ = kinit -k -t ./temp.keytab FOO@EXAMPLE.CO= M

kinit: Key table entry not found w= hile getting initial credentials

&n= bsp;

I looked at the configuration of the apa= cheds, des-cbc-md5 is one of the encryption types that it supports.  N= ormal kinit FOO@EXAMPLE.COM works on= both the apacheds host and the client.

 

Regards,

 

james

=

 

 <= /o:p>

James

= --_000_7D664BE6CF058A4CB1A06984A7AA678F1808032F63SMCALAVXMB06A_--