Server not found in kerberos database

liulg

unread,

Apr 9, 2002, 11:47:00 PM4/9/02

to

Hi anyone
I have a problem when i use kerberos.It's version is 5.1.2.3

When i want to get a ticket by kinit,such as "kinit -f test",Ii can
get a ticket.but when i telnet the telnet server machine
10.30.10.56,through "telnet -a -f -x 10.30.10.56", ,it tell me that
"Server not found in kerberos database".
But when i use "kinit -f test -S telnet/10.30.10.56" or "kinit -f test
-S host/10.30.10.56",it is OK, those exist in /etc/krb5.keytab.
I use "telnet -a -f -x 10.30.10.56", it tell me "telnet: Kerberos V5:
failure on credentials (Matching credential not found)"
why?

my kdc is 10.30.10.56,this machine is not dns.through
"gethostbyaddr",i only get it's ip.OS is RedHat 7.2.
Thanks.

Srinivas Cheruku

unread,

Apr 10, 2002, 12:20:59 AM4/10/02

to

> When i want to get a ticket by kinit,such as "kinit -f test",Ii can
> get a ticket.but when i telnet the telnet server machine
> 10.30.10.56,through "telnet -a -f -x 10.30.10.56", ,it tell me that
> "Server not found in kerberos database".

Look into the KDC log file and you will come to know which service principal
it is looking into to get the service ticket.

*********************************************************************
Disclaimer: The information in this e-mail and any attachments is
confidential / privileged. It is intended solely for the addressee or
addressees. If you are not the addressee indicated in this message, you may
not copy or deliver this message to anyone. In such case, you should destroy
this message and kindly notify the sender by reply email. Please advise
immediately if you or your employer does not consent to Internet email for
messages of this kind.
*********************************************************************
________________________________________________
Kerberos mailing list Kerb...@mit.edu
http://mailman.mit.edu/mailman/listinfo/kerberos

liulg

unread,

Apr 10, 2002, 4:41:20 AM4/10/02

to

cs...@sonata-software.com (Srinivas Cheruku) wrote in message news:<E0315628431FD611BB4300C04F1523769A3547@BG1MAIL>...

Thanks.
I get those messages ,can you help me.
such as :

Apr 10 16:39:27 10.30.10.56 krb5kdc[856](info): AS_REQ
10.30.10.56(88): ISSUE: authtime 1018427967, te...@10.30.10.56 for
krbtgt/10.30...@10.30.10.56
Apr 10 16:39:50 10.30.10.56 krb5kdc[856](info): TGS_REQ
10.30.10.56(88): UNKNOWN_SERVER: authtime 1018427967, te...@10.30.10.56
for krbtgt/30.1...@10.30.10.56,
Server not found in Kerberos database
Apr 10 16:39:50 10.30.10.56 krb5kdc[856](info): TGS_REQ
10.30.10.56(88): UNKNOWN_SERVER: authtime 1018427967, te...@10.30.10.56
for krbtgt/30.1...@10.30.10.56,
Server not found in Kerberos database
Apr 10 16:39:50 10.30.10.56 krb5kdc[856](info): TGS_REQ
10.30.10.56(88): UNKNOWN_SERVER: authtime 1018427967, te...@10.30.10.56
for krbtgt/30.1...@10.30.10.56,
Server not found in Kerberos database
Apr 10 16:39:50 10.30.10.56 krb5kdc[856](info): TGS_REQ
10.30.10.56(88): UNKNOWN_SERVER: authtime 1018427967, te...@10.30.10.56
for krbtgt/30.1...@10.30.10.56,
Server not found in Kerberos database

I do not know what to do .

Srinivas Cheruku

unread,

Apr 10, 2002, 4:50:30 AM4/10/02

to

> I get those messages ,can you help me.
> such as :
>
> Apr 10 16:39:27 10.30.10.56 krb5kdc[856](info): AS_REQ
> 10.30.10.56(88): ISSUE: authtime 1018427967, te...@10.30.10.56 for
> krbtgt/10.30...@10.30.10.56
> Apr 10 16:39:50 10.30.10.56 krb5kdc[856](info): TGS_REQ
> 10.30.10.56(88): UNKNOWN_SERVER: authtime 1018427967, te...@10.30.10.56
> for krbtgt/30.1...@10.30.10.56,
> Server not found in Kerberos database
> Apr 10 16:39:50 10.30.10.56 krb5kdc[856](info): TGS_REQ
> 10.30.10.56(88): UNKNOWN_SERVER: authtime 1018427967, te...@10.30.10.56
> for krbtgt/30.1...@10.30.10.56,
> Server not found in Kerberos database
> Apr 10 16:39:50 10.30.10.56 krb5kdc[856](info): TGS_REQ
> 10.30.10.56(88): UNKNOWN_SERVER: authtime 1018427967, te...@10.30.10.56
> for krbtgt/30.1...@10.30.10.56,
> Server not found in Kerberos database
> Apr 10 16:39:50 10.30.10.56 krb5kdc[856](info): TGS_REQ
> 10.30.10.56(88): UNKNOWN_SERVER: authtime 1018427967, te...@10.30.10.56
> for krbtgt/30.1...@10.30.10.56,
> Server not found in Kerberos database
>
> I do not know what to do .

Dont give the ip address for the REALM. Give a Name to REALM something like
TEST.COM etc..
Give a hostname to the host machine and update the hosts files.

Srini

Srinivas Cheruku

unread,

Apr 10, 2002, 4:55:37 AM4/10/02

to

Then add the service principal in the KDC as host/host...@TEST.COM and
extract it into the keytab.

>
> Srini

liulg

unread,

Apr 11, 2002, 4:04:34 AM4/11/02

to

Thank very much.
I have resolved my problem by your way.
Thanks.