Received: from SOUTH-STATION-ANNEX.MIT.EDU by po7.MIT.EDU (5.61/4.7) id AA15411; Mon, 1 Jan 96 15:51:12 EST Received: from pad-thai.cam.ov.com by MIT.EDU with SMTP id AA21959; Mon, 1 Jan 96 14:43:20 EST Date: Mon, 1 Jan 96 14:43:20 EST From: MAILER-DAEMON@MIT.EDU (Mail Delivery Subsystem) Subject: Returned mail: Deferred: Connection timed out during user open with ftpbox.mot.com Message-Id: <9601011943.AA21959@MIT.EDU> To: owner-kerberos@MIT.EDU ----- Transcript of session follows ----- 421 ocsg.com.tcp... Deferred: Connection timed out during user open with kerby.ocsg.com 451 don@gza.com... reply: read error 451 don@gza.com... reply: read error >>> RCPT To: <<< 553 unknown or illegal user: DJMSYS@ritvax.isc.rit.edu 550 DJMSYS@ritvax.isc.rit.edu... User unknown 451 Tony.Lill@AJLC.Waterloo.ON.CA... reply: read error 451 Tony.Lill@AJLC.Waterloo.ON.CA... reply: read error 421 hsvaic.hv.boeing.com.tcp... Deferred: Connection refused by atc.boeing.com 451 jsthyer@hamlet.uncg.edu... reply: read error 451 jsthyer@hamlet.uncg.edu... reply: read error 421 ccm.sns.com.sg.tcp... Deferred: Connection refused by ccm.sns.com.sg 421 sunvm1.corp.mot.com.tcp... Deferred: Connection timed out during user open with ftpbox.mot.com 421 pyro.rh.imsa.edu.tcp... Deferred: Connection timed out during user open with pyro.rh.imsa.edu 421 pamd.cig.mot.com.tcp... Deferred: Connection timed out during user open with ftpbox.mot.com ----- Unsent message follows ----- Received: from pad-thai.cam.ov.com by MIT.EDU with SMTP id AA21880; Mon, 1 Jan 96 14:43:20 EST Received: by pad-thai.cam.ov.com (8.6.12/) id ; Mon, 1 Jan 1996 14:46:33 -0500 Received: from GATEWAY by pad-thai.cam.ov.com with netnews for kerberos-wrapper@cam.ov.com (kerberos@mit.edu) To: kerberos@MIT.EDU Date: 1 Jan 1996 19:41:11 GMT From: grumple@grumpy.magg.net (Greg Rumple) Message-Id: <4c9dcn$61k@grumpy.magg.net> Organization: M.A.G. Information Services Sender: usenet@cam.ov.com Subject: Kerberos V5 Beta 5 and Slave Servers Okay, I have just spent the last 4 hours trying my darnest to figure out how to get a slave server up and running with Kerberos V5 Beta 5 and so far all I have done is get frustrated. I could find no real docs on doing this (docs need to be written it says). So I second guessed it. Here is what I did, on my master server I did an ark host/grumpy.magg.net, which is it's name, and then did an ark host/doc.magg.net, which is the server I planned on making a slave. I modified the krb5.conf files on both to look like this. [libdefaults] ticket_lifetime = 600 default_realm = MAGG-NET [realms] MAGG-NET = { kdc = GRUMPY.MAGG.NET kdc = DOC.MAGG.NET admin_server = GRUMPY.MAGG.NET default_domain = MAGG.NET } [domain_realm] .magg.net = MAGG-NET magg.net = MAGG-NET Now all is well on the main server, but when I try and do a kprop to the slave, I get the following error on the slave. Jan 1 14:27:52 doc kpropd[15480]: Rejected connection from unauthorized principal host/grumpy.magg.net@MAGG-NET Now of course I did do an xst grumpy.magg.net host on grumpy and did move that file to /etc/v5srvtab on grumpy, and also did a xst doc.magg.net host on grumpy, and moved that file to /etc/v5srvtab on doc, which is sorta what the docs said to do on the one web page that even MENTIONED slave servers. So now that I'm completely baffled here, what do I have to do to get this to work, it rejects it on the slave end, and causes the master end to spit out an odd message as well. /krb5/sbin/kprop: ASN.1 structure is missing a required field while encoding database size So if anyone knows how to do this properly please let me know, I'm on my last straw with this. I'm ready to go back to just one server again, it was so much easier. I only use this for authentication using Xyplex Terminal Servers, nothing more anyway. Thanks. -- |-----------------------------------------------------| | Greg Rumple grumple@magg.net | | | | M.A.G. Information Services System Administrator | | | | http://www.magg.net South Florida's I-Net Provider | | (407) 964-9841 Accounts from 19.95 | |-----------------------------------------------------|