Hi Russ, Thanks for the suggestion! Unfortunately that's not the problem - I gave that a try, and it's not even communicating with the KDC. There are zero packets being sent to the server, and per the error message:
Authenticating as principal WELLKNOWN/ANONYMOUS@WELLKNOWN:ANONYMOUS with password; anonymous requested. kadmin: Cannot resolve network address for KDC in requested realm while initializing kadmin interface <== It can't seem to find the KDC. Odd, considering the KDC and admin_server are clearly configured in /etc/krb5.conf and work with the traditional scenarios. Puzzled. Wondering if I'm going about this anonymous flow the right way at all! - James On 9/6/13 5:20 PM, "Russ Allbery" <[email protected]> wrote: >James Croall <[email protected]> writes: > >> Kadmin just won't let me in. When using the WELLKNOWN principal, it >> cannot find the KDC/Kadmin server: > >>> kinit -n >>> kadmin -n @TRIAL.COVERITY.COM >> Authenticating as principal WELLKNOWN/admin@WELLKNOWN:ANONYMOUS with >>password; anonymous requested. > >kadmin is "helpfully" adjusting the principal name for you. See if: > > kadmin -p WELLKNOWN/ANONYMOUS@WELLKNOWN:ANONYMOUS -n >@TRIAL.COVERITY.COM > >gets you closer. > >-- >Russ Allbery ([email protected]) <http://www.eyrie.org/~eagle/> > ________________________________________________ Kerberos mailing list [email protected] https://mailman.mit.edu/mailman/listinfo/kerberos
