Package: heimdal-clients
Version: 1.6~git20120403+dfsg1-3
Severity: important
File: /usr/sbin/kadmin


Hi!

Thank You for your effort maintaining this package!




We have a running and working heimdal kdc setup in the office. Last week, we
added a new host, usually standard procedure.

When trying to export the keytab to the host

newhost> kadmin -p xxx/admin
add --random-key host/my.host.name
...
...

i usually after success hereabove just say

ext_keytab host/my.host.name*

andd automatically /etc/krb5.keytab gets generated with the host key.

now, this time, i tried the same and always got

Jul 22 18:39:58 my.host.name login[20923]: pam_krb5(login:auth): (user KKK)
credential verification failed: encryption key has bad length
Jul 22 18:39:58 my.host.name login[20923]: pam_krb5(login:auth):
authentication
failure; logname=KKK uid=0 euid=0 tty=/dev/pts/0 ruser= rhost=


google says something about a broken keymap and i agree. When aftre hours of
dns, ntp, password, ldap, ... debugging i just hand-copied the krb5.keytab
that i generated via 'kadmin -l' on the krb server all 'just worked'.

so something must happen 'over the wire'.


lg,k









-- System Information:
Debian Release: jessie/sid
  APT prefers testing
  APT policy: (650, 'testing'), (600, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.9-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=, LC_CTYPE=en_US.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages heimdal-clients depends on:
ii  krb5-config            2.3
ii  libasn1-8-heimdal      1.6~git20120403+dfsg1-3
ii  libc6                  2.17-7
ii  libdb5.1               5.1.29-6
ii  libedit2               2.11-20080614-6
ii  libgssapi3-heimdal     1.6~git20120403+dfsg1-3
ii  libhcrypto4-heimdal    1.6~git20120403+dfsg1-3
ii  libhdb9-heimdal        1.6~git20120403+dfsg1-3
ii  libheimbase1-heimdal   1.6~git20120403+dfsg1-3
ii  libheimntlm0-heimdal   1.6~git20120403+dfsg1-3
ii  libhx509-5-heimdal     1.6~git20120403+dfsg1-3
ii  libkadm5clnt7-heimdal  1.6~git20120403+dfsg1-3
ii  libkadm5srv8-heimdal   1.6~git20120403+dfsg1-3
ii  libkafs0-heimdal       1.6~git20120403+dfsg1-3
ii  libkrb5-26-heimdal     1.6~git20120403+dfsg1-3
ii  libotp0-heimdal        1.6~git20120403+dfsg1-3
ii  libroken18-heimdal     1.6~git20120403+dfsg1-3
ii  libsl0-heimdal         1.6~git20120403+dfsg1-3
ii  libtinfo5              5.9+20130608-1
ii  libwind0-heimdal       1.6~git20120403+dfsg1-3

heimdal-clients recommends no packages.

Versions of packages heimdal-clients suggests:
pn  heimdal-docs  <none>
pn  heimdal-kcm   <none>

-- no debconf information


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to