Ticket History #297: Installing Kerberos V5

From benjid@team2.teamnet.net Thu Dec 12 15:00:34 1996
Received: from MIT.EDU (SOUTH-STATION-ANNEX.MIT.EDU [18.72.1.2]) by rt-11.MIT.EDU (8.7.5/8.7.3) with SMTP id PAA22320 for <bugs@RT-11.MIT.EDU>; Thu, 12 Dec 1996 15:00:33 -0500
Received: from team2.teamnet.net by MIT.EDU with SMTP
id AA26823; Thu, 12 Dec 96 15:00:18 EST
Received: by team2.teamnet.net (950215.SGI.8.6.10/940406.SGI.AUTO)
for krb5-bugs@mit.edu id OAA25281; Thu, 12 Dec 1996 14:00:10 -0600
Message-Id: <199612122000.OAA25281@team2.teamnet.net>
Date: Thu, 12 Dec 1996 14:00:02 -0600 (CDT)
From: benjid@team2.teamnet.net (Ben Dehner)
To: krb5-bugs@MIT.EDU
Subject: Installing Kerberos V5

I'm sending this to "krb5-bugs" since I'm not sure where else to send
this; this may be a bug or a user error.

Anyhow, I am trying to install Kerberos version 5 beta-7 on a SGI
system under IRIX 5.3; I compiled the source code using gcc 2.7.2. The
compile and install went mostly clean, although there were some warnings
about "mixed pointer/integer" errors. (I shoulda redirected the output
of the "make" into a file just for this ...)

Since it seemed to install just fine, I then tried to create a
database with the kdb5_util command; thats where I ran into trouble.

First, I created a file /etc/krb5.conf, included below. I basically
copied this file out of the Appendix in the Install guide, with local
changes. Next, I created a file /usr/krb5/lib/krb5kdc/kdc.conf, also below.
However, when I tried to run "kdb5_util" to create the data files, it crashed
because it was trying to put the database files in "/usr/local/lib/krb5kdc",
which it couldn't find. I didn't create that directory because I *thought* I
had specified that the database files go into the /usr/krb5 area. After a
bit of mucking around, I came to the conclusion that the "kdc" profile option
in the /etc/krb5.conf file was being ignored by kdb5_util. Incidentally,
the man page on on the krb5.conf file (krb5.conf.5) does not mention the
the [kdc] section.

I next tried putting kdc.conf in the /usr/local/lib/krb5kdc
directory, since that is the default path; this time, it found kdc.conf, and
(seemed to) create the database files where I wanted them, in /usr/krb5.
However, kdb5_util exited with the following error message:

kdb5_util: Can't open/find configuration file while initializing the kerberos
context

(Question: WHICH config file?)

Finally, I tried putting everything in the /usr/local directory, and
changed the kdc.conf file so that all the database stuff would go under this
directory as well. However, kdb5_util again exited with the above error
message.

Thanks for your time and assistance; if there are any other details
needed, please contact me.

Ben Dehner


***************************************************************
config files:

********************** krb5.conf
[libdefaults]
ticket_lifetime = 600
default_realm = TEAMNET.NET
default_tkt_enctypes = des-cbc-crc
default_tgs_enctypes = des-cbc-crc

[realms]
TEAMNET.NET = {
kdc = team2.teamnet.net:88
admin_server = team2.teamnet.net:749
default_domain = teamnet.net
}
}

[domain_realm]
.teamnet.net = TEAMNET.NET
teamnet.net = TEAMNET.NET

[kdc]
profile = /usr/krb5/lib/krb5kdc/kdc.conf

[logging]
kdc = SYSLOG:LOG_NOTICE:LOG_LOCAL1
admin_server = SYSLOG:LOG_NOTICE:LOG_LOCAL1
default = SYSLOG:LOG_NOTICE:LOG_LOCAL1
*************************

***************** kdc.conf

[kdcdefaults]
kdc_ports = 88,750

[realms]
TEAMNET.NET = {
profile = /etc/krb5.conf
database_name = /usr/krb5/lib/krb5kdc/principal
admin_database_name = /usr/krb5/lib/krb5kdc/principal.kadm5
admin_database_lockfile = /usr/krb5/lib/krb5kdc/principal.kadm5.lock
admin_keytab = /usr/krb5/lib/krb5kdc/kadm5.keytab
acl_file = /usr/krb5/lib/krb5kdc/kadm5.acl
dict_file = /usr/krb5/lib/krb5kdc/kadm5.dict
key_stash_file = /usr/krb5/lib/krb5kdc/.k5.TEAMNET.NET
kadmin_port = 749
max_life = 12h 0m 0s
max_renewable_life = 7d 0h 0m 0s
master_key_type = des-cbc-crc
supported_enctypes = des-cbc-crc:normal des-cbc-crc:v4
}
**************************

Responsible-Changed-From-To: gnats-admin->krb5-unassigned
Responsible-Changed-By: raeburn
Responsible-Changed-When: Fri Sep 14 14:26:03 2001
Responsible-Changed-Why:
change category from pending