Ticket History #802: Unable to connect to MIT 5-1.1.x KDC

From bear@coyotesong.com Thu Jan 6 22:42:09 2000
Received: from MIT.EDU (PACIFIC-CARRIER-ANNEX.MIT.EDU [18.69.0.28])
by rt-11.mit.edu (8.9.3/8.9.3) with SMTP id WAA26004
for <bugs@RT-11.MIT.EDU>; Thu, 6 Jan 2000 22:42:09 -0500 (EST)
Received: from bgiles.dimensional.com by MIT.EDU with SMTP
id AA20640; Thu, 6 Jan 00 22:42:56 EST
Received: (from bear@localhost)
by eris.coyotesong.com (8.9.3/8.9.3/Debian/GNU) id UAA09348;
Thu, 6 Jan 2000 20:19:22 -0700
Message-Id: <200001070319.UAA09348@eris.coyotesong.com>
Date: Thu, 6 Jan 2000 20:19:22 -0700
From: bgiles@coyotesong.com
Reply-To: bgiles@coyotesong.com
To: krb5-bugs@MIT.EDU
Cc:
Subject: Unable to connect to MIT 5-1.1.x KDC
X-Send-Pr-Version: 3.99

Bear Giles
bgiles@coyotesong.com

Debian-2.1r5
System: Linux eris 2.2.13 #7 SMP Sat Oct 30 20:57:16 MDT 1999 i686 unknown
Architecture: i686


krb5kdc generates the following error message when I attempt to
load it:

/var/log/krb5kdc:
krb5kdc: Profile relation not found - while reading realm parameters

This happens every time I attempt to connect to a 5-1.1 or 5-1.1.1
KDC.

My /etc/krb5.conf file contains:

[libdefaults]
ticket_lifetime = 600
default_realm = COYOTESONG.COM

[realms]
COYOTESONG.COM = {
kdc = eris.coyotesong.com
admin_server = eris.coyotesong.com
default_domain = coyotesong.com
}

[domain_realm]
.coyotesong.com = COYOTESONG.COM
coyotesong.com = COYOTESONG.COM

[logging]
kdc = FILE:/var/log/krb5kdc.log
admin_server = FILE:/var/log/kadmin.log
default = FILE:/var/log/krb5lib.log

[appdefaults]
kinit = {
forwardable = true
}
telnet = {
forward = true
encrypt = true
autologin = true
}

The following code appears to eliminate the problem, although I
now get a new error message:

krb5kdc: Bad encryption type - while verifying master key for realm COYOTESONG.COM

begin 664 0004
M+2TM(&]L9"]S<F,O;&EB+VMA9&TU+V%L=%]P<F]F+F,)5&AU(%-E<"`R,R`Q
M-CHT,CHU-R`Q.3DY"BLK*R!N97<O<W)C+VQI8B]K861M-2]A;'1?<')O9BYC
M"5-A="!/8W0@,C,@,#DZ,C<Z,S,@,3DY.0I`0"`M.#<Q+#(P("LX-S$L,C,@
M0$`*("`@("`O*B!'970@=&AE('9A;'5E(&9O<B!T:&4@<W5P<&]R=&5D(&5N
M8W1Y<&4O<V%L='1Y<&4@;6%T<FEX("HO"B`@("`@+RH@6%A8(%1H:7,@:7,@
M<V\@=&AA="!T:&4@:V1C('=I;&P@<V5A<F-H(&$@9&EF9F5R96YT"B`@("`@
M("`@96YC='EP92!L:7-T('1H86X@:V%D;6EN9"`J+PHM("`@(&AI97)A<F-H
M:W)B-5]A<')O9E]G971?<W1R:6YG*&%P<F]F:6QE+"!H:65R87)C:'DL(%12
M544L("9S=F%L=64I.PHM("`@(&EF("AK<F5T*2!["BT):&EE<F%R8VAY6S)=
M(#T@(G-U<'!O<G1E9%]E;F-T>7!E<R(["BL@("`@:68@*"%K<F5T*2!["BL)
M:&EE<F%R8VAY6S)=(#T@(FMD8U]S=7!P;W)T961?96YC='EP97,B.PH@"6MR
M970@/2!K<F(U7V%P<F]F7V=E=%]S=')I;F<H87!R;V9I;&4L(&AI97)A<F-H
M"6MR8C5?<W1R:6YG7W1O7VME>7-A;'1S*'-V86QU92P*+0D)"0DB+"!<="(L
M"2\J(%1U<&QE('-E<&%R871O<G,)*B\*+0D)"0DB.BXM(BP)+RH@2V5Y+W-A
M;'0@<V5P87)A=&]R<PDJ+PHM"0D)"3`L"2\J($YO(&1U<&QI8V%T97,)*B\*
M+0D)"0DF<G!A<F%M<RT^<F5A;&U?:V5Y<V%L=',L"BT)"0D))G)P87)A;7,M
M/G)E86QM7VYU;5]K97ES86QT<RD["BT):W)B-5]X9G)E92AS=F%L=64I.PHK
M"6EF("AK<F5T*2!["BL)("`@(&AI97)A<F-H>5LR72`](")S=7!P;W)T961?
M96YC='EP97,B.PHK"2`@("!K<F5T(#T@:W)B-5]A<')O9E]G971?<W1R:6YG
M*&%P<F]F:6QE+"!H:65R87)C:'DL(%12544L("9S=F%L=64I.PHK"7T**PEI
M9B`H(6MR970I('L**PD@("`@:W)B-5]S=')I;F=?=&]?:V5Y<V%L=',H<W9A
M;'5E+`HK"0D)"2`@("`B+"!<="(L"2\J(%1U<&QE('-E<&%R871O<G,)*B\*
M*PD)"0D@("`@(CHN+2(L"2\J($ME>2]S86QT('-E<&%R871O<G,)*B\**PD)
M"0D@("`@,"P)"2\J($YO(&1U<&QI8V%T97,)*B\**PD)"0D@("`@)G)P87)A
M;7,M/G)E86QM7VME>7-A;'1S+`HK"0D)"2`@("`F<G!A<F%M<RT^<F5A;&U?
M;G5M7VME>7-A;'1S*3L**PD@("`@:W)B-5]X9G)E92AS=F%L=64I.PHK"7T*
?*PEK<F5T(#T@,#L*("`@("!]"B`*(&-L96%N=7`Z"@``
`
end

Responsible-Changed-From-To: krb5-unassigned->raeburn
Responsible-Changed-By: raeburn
Responsible-Changed-When: Mon Feb 21 16:23:56 2000
Responsible-Changed-Why:

I'll take it...

State-Changed-From-To: open-feedback
State-Changed-By: raeburn
State-Changed-When: Mon Feb 21 16:24:03 2000
State-Changed-Why:

Okay, this one's going in too...

State-Changed-From-To: feedback-closed
State-Changed-By: tlyu
State-Changed-When: Fri Sep 14 18:51:12 2001
State-Changed-Why:
fixed pre-1.2; closing old PR...