PDA

View Full Version : kerberos error,please help:>


Jedy
2004-05-12, 08:33 PM CDT
Hi,here is some error which produce in my computer.Please help me!!!

[root@lixg krb5kdc]# kinit
Password for jedy/10.214.43.37@EXAMPLE.COM:
[root@lixg krb5kdc]# klist
Ticket cache: FILE:/tmp/krb5cc_0
Default principal: jedy/10.214.43.37@EXAMPLE.COM

Valid starting Expires Service principal
05/13/04 10:16:53 05/14/04 10:16:50 krbtgt/EXAMPLE.COM@EXAMPLE.COM

Kerberos 4 ticket cache: /tmp/tkt0
klist: You have no tickets cached
[root@lixg krb5kdc]# rlogin 10.214.43.37
error getting credentials: Server not found in Kerberos database
Trying krb4 rlogin...
krb_sendauth failed: You have no tickets cached
trying normal rlogin (/usr/bin/rlogin)
lixg: Connection refused
[root@lixg krb5kdc]# kdestroy
[root@lixg krb5kdc]# rlogin 10.214.43.37
Trying krb4 rlogin...
krb_sendauth failed: You have no tickets cached
trying normal rlogin (/usr/bin/rlogin)
lixg: Connection refused

[root@lixg krb5kdc]# kadmin.local
Authenticating as principal root/admin@EXAMPLE.COM with password.
kadmin.local: listprincs
K/M@EXAMPLE.COM
admin/admin@EXAMPLE.COM
jedy/10.214.43.37@EXAMPLE.COM
kadmin/admin@EXAMPLE.COM
kadmin/changepw@EXAMPLE.COM
kadmin/history@EXAMPLE.COM
krbtgt/EXAMPLE.COM@EXAMPLE.COM
lixg/10.214.43.37@EXAMPLE.COM

[root@lixg krb5kdc]# telnet -ax 10.214.43.37
Trying 10.214.43.37...
Connected to lixg (10.214.43.37).
Escape character is '^]'.
Waiting for encryption to be negotiated...
Negotiation of authentication, which is required for encryption,
has failed. Good-bye
[root@lixg krb5kdc]

The krlogin and telnet can't work .

Thanks!!!

jedy

jayasree
2007-11-27, 03:45 AM CST
hi
i am getting the same error
"Waiting for encryption to be negotiated...
Negotiation of authentication, which is required for encryption,
has failed. Good-bye"

can you help me with this

thanks!!!

jayasree

HaydnH
2007-11-27, 05:37 AM CST
"[root@lixg krb5kdc]# telnet -ax 10.214.43.37"


The "-a" tries an automatic login as the current user (root in this case!) are you sure 10.214.43.37 allows remote root logins??? It probably shouldn't if it does! Try just "telnet 10.214.43.37" and see what happens.