Kerberos on AIX 5.3 : error :Cannot retrieve key from keytab file - Kerberos

This is a discussion on Kerberos on AIX 5.3 : error :Cannot retrieve key from keytab file - Kerberos ; Hi , Following is the output of some of the commands are ran after adding principals on kerberos database. kadmin.local: getprinc nfs/vcsaix6.vxindia.veritas.co*m Principal: nfs/vcsaix6.vxindia.veritas....@vxindia.veritas.com Expiration date: [never] Last password change: Tue Jul 19 17:21:56 CDT 2005 Password expiration date: [none] ...

+ Reply to Thread
Results 1 to 2 of 2

Thread: Kerberos on AIX 5.3 : error :Cannot retrieve key from keytab file

  1. Kerberos on AIX 5.3 : error :Cannot retrieve key from keytab file

    Hi ,
    Following is the output of some of the commands are ran after
    adding principals on kerberos database.


    kadmin.local: getprinc nfs/vcsaix6.vxindia.veritas.co*m
    Principal: nfs/vcsaix6.vxindia.veritas....@vxindia.veritas.com
    Expiration date: [never]
    Last password change: Tue Jul 19 17:21:56 CDT 2005
    Password expiration date: [none]
    Maximum ticket life: 1 day 00:00:00
    Maximum renewable life: 7 days 00:00:00
    Last modified: Tue Jul 19 17:21:56 CDT 2005
    (root/ad...@vxindia.veritas.com)
    Last successful authentication: [never]
    Last failed authentication: [never]
    Failed password attempts: 0
    Number of keys: 4
    Key: vno 4, Triple DES cbc mode with HMAC/sha1,
    no salt
    Key: vno 4, ArcFour with HMAC/md5,
    no salt
    Key: vno 4, AES-256 CTS mode with 96-bit SHA-1 HMAC,
    no salt
    Key: vno 4, DES cbc mode with RSA-MD5,
    no salt


    Attributes:


    Policy: [none]
    kadmin.local:


    ------------------------------*--
    bash-2.05b# klist -k /etc/krb5/krb5.keytab


    Key table: /etc/krb5/krb5.keytab
    Number of entries: 4


    [1] principal: nfs/vcsaix6.vxindia.veritas....@vxindia.veritas.com
    KVNO: 4


    [2] principal: nfs/vcsaix6.vxindia.veritas....@vxindia.veritas.com
    KVNO: 4


    [3] principal: nfs/vcsaix6.vxindia.veritas....@vxindia.veritas.com
    KVNO: 4


    [4] principal: nfs/vcsaix6.vxindia.veritas....@vxindia.veritas.com
    KVNO: 4
    bash-2.05b#
    klist -k /etc/krb5/krb5.keytab
    bash-2.05b# kinit -k -t /etc/krb5/krb5.keytab
    nfs/vcsaix6.vxindia.veritas.co*m
    com.ibm.security.krb5.KrbExcep*tion, status code: 0
    message: Cannot retrieve key from keytab for principal
    nfs/vcsaix6.vxindia.veritas....@vxindia.veritas.com


    When klist is able to read /etc/krb5/krb5.keytab file why is kinit
    not able to retrive the key.


    thanks,
    kiran


  2. Re: Kerberos on AIX 5.3 : error :Cannot retrieve key from keytabfile

    kiranmehta1981@yahoo.com wrote:

    > klist -k /etc/krb5/krb5.keytab
    > bash-2.05b# kinit -k -t /etc/krb5/krb5.keytab
    > nfs/vcsaix6.vxindia.veritas.co*m
    > com.ibm.security.krb5.KrbExcep*tion, status code: 0
    > message: Cannot retrieve key from keytab for principal
    > nfs/vcsaix6.vxindia.veritas....@vxindia.veritas.com
    >
    >
    > When klist is able to read /etc/krb5/krb5.keytab file why is kinit
    > not able to retrive the key.


    You are using a Java version of kinit. Does the version of Java
    you are using support all of the key types included in the keytab
    file?

    Jeffrey Altman

    --
    -----------------
    This e-mail account is not read on a regular basis.
    Please send private responses to jaltman at mit dot edu

+ Reply to Thread