Make sure you have the latest krb5.conf installed
-
- Fermilab Kerberos Configuation Templates
- Also available in the fermilab-conf_kerberos package
- Fermilab Kerberos Configuation Templates
- It is recommended that you run kpasswd on a Linux system (FNALU is available as a general purpose Linux system) to change your Kerberos password. You will probably need to wait at least 20 minutes after changing your password for the change to propagate to all the secondary KDCs. Your kinit might fail due to attempting to get credentials from a secondary KDC that still has the old password.
- If you need more assistance installing Kerberos on a Mac, please see the following KB article: KB0011294
- If running Ubuntu with Heimdal Kerberos and see an md5 error message (kinit: krb5_get_init_creds: Checksum type rsa-md5-des is keyed, but the key type des-cbc-crc passed didnt have that checksum type as the keyed type) - either
- Change your password (requires a MIT based kpasswd) or
- Install the MIT Kerberos Client
- sudo apt-get install krb5-user libpam-krb5 libpam-ccreds auth-client-config
- and install the latest krb5.conf file from the web