Cannot resolve network address for KDC in requested realm!
M.Kondrin
mkondrin at hppi.troitsk.ru
Tue Nov 22 01:59:58 EST 2005
Amir Saad wrote:
>i use Heidmal Kerberos 5 , Cyrus-SASL 2.1.19 , Fedora 4
>i'm trying to run the sample-client but i got the following response:
>********************************************************************************************************************************************
>Waiting for mechanism list from server...
>S: QU5PTllNT1VTIExPR0lOIFBMQUlOIERJR0VTVC1NRDUgT1RQIEdTU0FQSSBDUkFNLU1ENQ==
>recieved 52 byte message
>Forcing use of mechanism GSSAPI
>Choosing best mechanism from: GSSAPI
>lt-sample-client: SASL Other: GSSAPI Error: Miscellaneous failure (Cannot resolv
>e network address for KDC in requested realm)
>error was SASL(-1): generic failure: GSSAPI Error: Miscellaneous failure (Cannot
> resolve network address for KDC in requested realm)
>lt-sample-client: Starting SASL negotiation: generic failure
>****************************************************************************************
>where is the error ? , i hope u can help
>thanks
>Amir Saad
>Software Engineer
>
>
>
>
You have to get the ticket for the service you try to contact (the name
of service is defined by -s switch in client/server commandline). The
ticket must exist in the kerberos cache on client host otherwise the
client try to contact KDC to get this ticket. In your case the client
can not do this. Either Kerberos realm is not configured on client host
or KDC ports are blocked by some sort of firewall.
Hope this helps.
M.Kondrin
More information about the Cyrus-sasl
mailing list