------- =_aaaaaaaaaa0
Content-Type: text/plain; charset="us-ascii"
Content-ID: <577.963337924.1@tomservo.vrac.iastate.edu>

joda@pdc.kth.se (Johan Danielsson) wrote:

} Patrick Hartling <patrick@137.org> writes:
} 
} > I have an /etc/krb5.conf that has some Kerberos IV bits in it, but I
} > am unable to get my K5 tickets converted to the Kerberos IV tickets
} > that I need.
} 
} What are those bits? -current doesn't use MIT krb5, so there might be
} differences. My impression (form reading the manpage) is that v4
} compat is wither built-in (in the MIT kinit) or not.

I have attached my /etc/krb5.conf file.  I don't claim to understand it
completely since I copied it from one of the Alpha machines here on
campus and modified what I knew needed to be changed (paths mainly).

} kinit -4 should do what you want, no?

I thought so, but it hangs for a while and then returns the following error
message:

kinit: converting creds: Cannot contact any KDC for requested realm

The requested realm in this case is IASTATE.EDU.  A subsequent klist shows
me that I do have K5 tickets:

> klist
Credentials cache: FILE:/tmp/krb5cc_13773
        Principal: mystify@IASTATE.EDU

  Issued           Expires          Principal
Jul 11 12:45:43  Jul 11 13:25:40  krbtgt/IASTATE.EDU@IASTATE.EDU

 -Patrick


Patrick L. Hartling			| Research Assistant, VRAC
patrick@137.org				| 2624 Howe Hall -- (515)294-4916
http://www.137.org/patrick/		| http://www.vrac.iastate.edu/


------- =_aaaaaaaaaa0
Content-Type: text/plain; charset="us-ascii"
Content-ID: <577.963337924.2@tomservo.vrac.iastate.edu>
Content-Description: /etc/krb5.conf

[libdefaults]
	ticket_lifetime = 2400
	default_realm = IASTATE.EDU
	default_tkt_enctypes = des-cbc-crc
	default_tgs_enctypes = des-cbc-crc
	krb4_srvtab = /etc/kerberosIV/srvtab
	krb4_config = /etc/kerberosIV/krb.conf
	krb4_realms = /etc/kerberosIV/krb.realms

[realms]
	IASTATE.EDU = {
		kdc = kerberos-1.iastate.edu
		kdc = kerberos-2.iastate.edu
		admin_server = kerberos-1.iastate.edu:749
		default_domain = iastate.edu
		supported_enctypes = des-cbc-crc:normal des-cbc-crc:v4
	}
	ATHENA.MIT.EDU = {
		kdc = kerberos.mit.edu
		kdc = kerberos-1.mit.edu
		kdc = kerberos-2.mit.edu
		kdc = kerberos-3.mit.edu
		admin_server = kerberos.mit.edu
		default_domain = mit.edu
	}

[domain_realm]
	.admin.iastate.edu = IASTATE.EDU
	.adp.iastate.edu = IASTATE.EDU
	.ae.iastate.edu = IASTATE.EDU
	.aecl.iastate.edu = IASTATE.EDU
	.aeem.iastate.edu = IASTATE.EDU
	.ag.iastate.edu = IASTATE.EDU
	.agron.iastate.edu = IASTATE.EDU
	.alumni.iastate.edu = IASTATE.EDU
	.ansci.iastate.edu = IASTATE.EDU
	.anthr.iastate.edu = IASTATE.EDU
	.athl.iastate.edu = IASTATE.EDU
	.bb.iastate.edu = IASTATE.EDU
	.biol.iastate.edu = IASTATE.EDU
	.biotech.iastate.edu = IASTATE.EDU
	.botany.iastate.edu = IASTATE.EDU
	.brenton.iastate.edu = IASTATE.EDU
	.bus.iastate.edu = IASTATE.EDU
	.card.iastate.edu = IASTATE.EDU
	.catd.iastate.edu = IASTATE.EDU
	.cc.iastate.edu = IASTATE.EDU
	.cce.iastate.edu = IASTATE.EDU
	.cclab.iastate.edu = IASTATE.EDU
	.center.iastate.edu = IASTATE.EDU
	.cfr.iastate.edu = IASTATE.EDU
	.chem.iastate.edu = IASTATE.EDU
	.cheme.iastate.edu = IASTATE.EDU
	.ciras.iastate.edu = IASTATE.EDU
	.classroom.iastate.edu = IASTATE.EDU
	.cnde.iastate.edu = IASTATE.EDU
	.cs.iastate.edu = IASTATE.EDU
	.ctre.iastate.edu = IASTATE.EDU
	.daily.iastate.edu = IASTATE.EDU
	.design.iastate.edu = IASTATE.EDU
	.dps.iastate.edu = IASTATE.EDU
	.econ.iastate.edu = IASTATE.EDU
	.educ.iastate.edu = IASTATE.EDU
	.ee.iastate.edu = IASTATE.EDU
	.ehs.iastate.edu = IASTATE.EDU
	.eng.iastate.edu = IASTATE.EDU
	.engl.iastate.edu = IASTATE.EDU
	.ent.iastate.edu = IASTATE.EDU
	.ers.iastate.edu = IASTATE.EDU
	.exnet.iastate.edu = IASTATE.EDU
	.fcs.iastate.edu = IASTATE.EDU
	.forestry.iastate.edu = IASTATE.EDU
	.foundation.iastate.edu = IASTATE.EDU
	.fpm.iastate.edu = IASTATE.EDU
	.geol.iastate.edu = IASTATE.EDU
	.gis.iastate.edu = IASTATE.EDU
	.greek.iastate.edu = IASTATE.EDU
	.gsb.iastate.edu = IASTATE.EDU
	.gss.iastate.edu = IASTATE.EDU
	.hep.iastate.edu = IASTATE.EDU
	.hist.iastate.edu = IASTATE.EDU
	.hort.iastate.edu = IASTATE.EDU
	.iastate.edu = IASTATE.EDU
	.icemt.iastate.edu = IASTATE.EDU
	.iitap.iastate.edu = IASTATE.EDU
	.imse.iastate.edu = IASTATE.EDU
	.iprt.iastate.edu = IASTATE.EDU
	.isbr.iastate.edu = IASTATE.EDU
	.isis.iastate.edu = IASTATE.EDU
	.itc.iastate.edu = IASTATE.EDU
	.jlmc.iastate.edu = IASTATE.EDU
	.lang.iastate.edu = IASTATE.EDU
	.lar.iastate.edu = IASTATE.EDU
	.las.iastate.edu = IASTATE.EDU
	.leopold.iastate.edu = IASTATE.EDU
	.lib.iastate.edu = IASTATE.EDU
	.marl.iastate.edu = IASTATE.EDU
	.math.iastate.edu = IASTATE.EDU
	.me.iastate.edu = IASTATE.EDU
	.merc.iastate.edu = IASTATE.EDU
	.micro.iastate.edu = IASTATE.EDU
	.mse.iastate.edu = IASTATE.EDU
	.music.iastate.edu = IASTATE.EDU
	.ncrd.iastate.edu = IASTATE.EDU
	.nri.iastate.edu = IASTATE.EDU
	.nstl.gov = IASTATE.EDU
	.nuce.iastate.edu = IASTATE.EDU
	.phil.iastate.edu = IASTATE.EDU
	.photo.iastate.edu = IASTATE.EDU
	.physics.iastate.edu = IASTATE.EDU
	.plp.iastate.edu = IASTATE.EDU
	.pols.iastate.edu = IASTATE.EDU
	.ppp.iastate.edu = IASTATE.EDU
	.print.iastate.edu = IASTATE.EDU
	.profiles.iastate.edu = IASTATE.EDU
	.psych.iastate.edu = IASTATE.EDU
	.rec.iastate.edu = IASTATE.EDU
	.regents.iastate.edu = IASTATE.EDU
	.reiman.iastate.edu = IASTATE.EDU
	.res.iastate.edu = IASTATE.EDU
	.rp.iastate.edu = IASTATE.EDU
	.sbdc.iastate.edu = IASTATE.EDU
	.seed.iastate.edu = IASTATE.EDU
	.sitelicensed.iastate.edu = IASTATE.EDU
	.soc.iastate.edu = IASTATE.EDU
	.ssol.iastate.edu = IASTATE.EDU
	.stat.iastate.edu = IASTATE.EDU
	.stuorg.iastate.edu = IASTATE.EDU
	.tele.iastate.edu = IASTATE.EDU
	.theatre.iastate.edu = IASTATE.EDU
	.ubs.iastate.edu = IASTATE.EDU
	.vdl.iastate.edu = IASTATE.EDU
	.veishea.iastate.edu = IASTATE.EDU
	.vincent.iastate.edu = IASTATE.EDU
	.vm.iastate.edu = IASTATE.EDU
	.zool.iastate.edu = IASTATE.EDU
	..iastate.edu = IASTATE.EDU
	.ameslab.gov = IASTATE.EDU
	.vrac.iastate.edu = IASTATE.EDU
	.bogus.iastate.edu = BOGUS.IASTATE.EDU
	.y2k.iastate.edu = Y2K.IASTATE.EDU
	.mit.edu = ATHENA.MIT.EDU

------- =_aaaaaaaaaa0--