Cannot resolve network address for KDC in requested realm!

M.Kondrin mkondrin at hppi.troitsk.ru
Tue Nov 22 01:59:58 EST 2005


Amir Saad wrote:

>i use Heidmal Kerberos 5 , Cyrus-SASL 2.1.19 , Fedora 4
>i'm trying to run the sample-client but i got the following response:
>********************************************************************************************************************************************
>Waiting for mechanism list from server...
>S: QU5PTllNT1VTIExPR0lOIFBMQUlOIERJR0VTVC1NRDUgT1RQIEdTU0FQSSBDUkFNLU1ENQ==
>recieved 52 byte message
>Forcing use of mechanism GSSAPI
>Choosing best mechanism from: GSSAPI
>lt-sample-client: SASL Other: GSSAPI Error: Miscellaneous failure (Cannot resolv
>e network address for KDC in requested realm)
>error was SASL(-1): generic failure: GSSAPI Error: Miscellaneous failure (Cannot
> resolve network address for KDC in requested realm)
>lt-sample-client: Starting SASL negotiation: generic failure
>****************************************************************************************
>where is the error ? , i hope u can help
>thanks
>Amir Saad
>Software  Engineer
> 
> 
>  
>
You have to get the ticket for the service you try to contact (the name 
of service is defined by -s switch in client/server commandline). The 
ticket must exist in the kerberos cache on client host otherwise the 
client try to contact KDC to get this ticket. In your case the client 
can not do this.  Either Kerberos realm is not configured on client host 
or KDC ports are blocked by some sort of firewall.
Hope this helps.
M.Kondrin


More information about the Cyrus-sasl mailing list