Subject: Kerberos 5 passwd/kpasswd & /etc/services?
To: None <current-users@netbsd.org>
From: Hans-Christian Becker <hcb@phc.chalmers.se>
List: current-users
Date: 07/05/2000 22:10:54
Dear all,
Having sucessfully (I think) set up a Kerbereros 5 kdc (i386 running
the 20000620 snapshot), I can from my macppc (sources from July 1)
* get tickets
* login
The latter, however, gives me
login in free(): warning: chunk is already free.
login in free(): warning: chunk is already free.
login in free(): warning: chunk is already free.
Last login: Wed Jul 5 21:01:58 2000 on ttyE0
but lets me log in.
More frustrating is that I cannot change my password:
hcb@fkmac26$ passwd
hcb@PHC.CHALMERS.SE's Password:
New password:
Verifying password - New password:
passwd: kpasswd/udp unknown service, using default port 464
passwd: krb5_change_password: Bad file descriptor
hcb@fkmac26$
I looked through /etc/services and compared with what the heimdal
distribution says, and indeed port 464 is undefined
/etc/services. Heimdal says
kpasswd 464/udp # password changing
kpasswd 464/tdp # password changing
If I add the lines above to /etc/services, only
passwd: krb5_change_password: Bad file descriptor
remains.
Looking through /etc/rc.d/kerberos and /etc/inetd.conf, I find
references to programs non-existent on my machines:
* /usr/sbin/kerberos
* /usr/libexec/registerd
I admit being relatively clueless as to setting up Kerberos, so any
hints, tips and explanations are warmly welcome.
Best regards,
Hans-Christian