Such a error says that the server is not reachable. kinit: krb5_get_init_creds: unable to reach any KDC in realm EXAMPLE.COM There are many possible reason why you can’t get a ticket. This means that it’s an important part of the authentication service in that it provides an increased level of privacy and cyber security, mainly in poorly secured computer networks. ![]() ![]() Ticket flags: pre-authent, initial, renewable, forwardableĪs we can see, we have obtained a ticket which will expire 6 hours after its creation, which can be renexed for 7 days, encrypted using AES-128 algorithm, ticket that can be used by the TGS. Kinit command explained The Kinit command retrieves or extends a granting ticket in the Kerberos authentication protocol. We will use the klist tool for that : $ klist -v Now, let’s check that we have correctly obtained a ticket. ![]() If you’ve get some, see later in this chapter. His password is ‘secret’) $ kinit for should not get any error. ![]() Send bug-reports to you have to configure the nf file (it can be found in /etc/nf, if not just add it).Ī minimal /etc/nf file looks as follows (make sure the port and host name matches!): Ĭheck that the Kerberos sevrer is started, then try to get a ticket from a user that exists in the base (here, we use hnelson, which is a user we created for test purposes. You can check that by typing kinit in a console : $ kinit -versionĬopyright 1995-2010 Kungliga Tekniska Högskolan You first have to make sure kinit is installed.
0 Comments
Leave a Reply. |