home *** CD-ROM | disk | FTP | other *** search
- Path: sparky!uunet!haven.umd.edu!decuac!pa.dec.com!rdg.dec.com!news.crl.dec.com!amber!dialup.athena.lkg.dec.com!mamros
- From: mamros@athena.lkg.dec.com (Shawn Mamros)
- Newsgroups: comp.protocols.kerberos
- Subject: Re: Moira client
- Message-ID: <925369@athena.lkg.dec.com>
- Date: 15 Dec 92 18:06:49 GMT
- References: <1992Dec10.234739.9133@ericsson.se> <1992Dec14.213214.7209@news.columbia.edu>
- Sender: mamros@dialup.athena.lkg.dec.com (Shawn Mamros)
- Reply-To: mamros@athena.lkg.dec.com (Shawn Mamros)
- Organization: Digital Equipment Corporation
- Lines: 29
-
-
- alan@curta.cc.columbia.edu (Alan Crosswell) writes:
- >In article <1992Dec10.234739.9133@ericsson.se> monica@netman.ericsson.se
- >(Monica Bouchibane) writes:
- >> I'm trying to include Moira (SMS) in our kerberized environment,
- >> but I'm having some problems with the moira client(s)
- >>
- >> The serverside seems to be running OK, but whenever I try to start
- >> the client (moira, dcmmaint, listmaint....) I have mainly two things
- >> showing up.
- >> .....moira: Kerberos error: Can't decode authenticator
- >> .....Authorization failed -- please run kinit
- >> .....Exit 1
- [...]
- >Check for principal name 'moira' vs. 'sms.' As I recall, there are a couple
- >places in the code where these are used interchangeably. This is probably
- >because after the code had been called sms for a while, they decided to
- >rename it Moira and some of the code still refers to it the old way. The
- >easy fix is to create two princpals: "moira.myserver" and "sms.myserver" with
- >the same key.
-
- I'm about 99% sure that the two principals needed are "moira.myserver" and
- "sms" (null instance name), and that they don't need the same key at all.
- "moira.myserver" is used for Moira client-server authentication, while "sms"
- is used by the data control manager (DCM) to authenticate to hosts running
- the update_server process (those hosts, in turn, need an "rcmd.hostname" key).
-
- -Shawn Mamros
- E-mail to: mamros@athena.lkg.dec.com
-