Conference smurf::buildhelp

Date Of Receipt: 	19-MAY-1993 09:30:02.15
From: 	KRISIS::"zap@zk3.dec.com" "Carolyn Hurley"
To: 	aju@zk3.dec.com
CC: 	zap@zk3.dec.com, odehelp@zk3.dec.com
Subj: 	Re: kerberos problem..

Hi Aju,

Kerberos is indicating that your system and the kerberos server
have an extreme system time difference.

Merge is having a problem keeping time.  Admin is looking into it.
If they haven't fixed the problem by the time you read this mail and
If you are doing the kinit from your workstation, you can edit
the /etc/krb.conf file and swap merge as the primary to a secondary.

For example:

% more /etc/krb.conf
ZONE
ZONE    merge
ZONE    krisis
ZONE    quarry
ZONE    grvlpt
ZONE    flume
ZONE    merge admin     dummy

change to:

% more /etc/krb.conf
ZONE
ZONE    krisis
ZONE    merge
ZONE    quarry
ZONE    grvlpt
ZONE    flume
ZONE    merge admin     dummy


/Carolyn

===============================



Return-Path: aju
Received: by flambe.zk3.dec.com; id AA11677; Wed, 19 May 1993 08:25:15 -0400
Received: by quarry.zk3.dec.com; id AA13492; Wed, 19 May 1993 08:24:43 -0400
Message-Id: <9305191224.AA13492@quarry.zk3.dec.com>
To: odehelp
Cc: jmf
Subject: kerberos problem.. 
Date: Wed, 19 May 93 08:24:43 +28716
From: aju
X-Mts: smtp


I am trying to get a kerberos ticket, but I get this
error:
kinit: Time is out of bounds (krb_rd_req)

I am stuck. Any idea what's wrong? 

Thanks,
- -aju

proton:~sb/sterling/src/usr/sbin$ kinit
MIT Project Athena (proton.zk3.dec.com)
Kerberos Initialization
Kerberos name: Aju_John
Password: 
kinit: Time is out of bounds (krb_rd_req)

Date Of Receipt: 	19-MAY-1993 09:43:49.19
From: 	KRISIS::johnf "John Flanagan OSG Test Johnf Tools Group"
To: 	krisis::aju
CC: 	krisis::odehelp, krisis::jmf, krisis::johnf
Subj: 	Re: kerberos problem..

You might want to make sure that you are running NTP in order to keep your
system time consistent with the varios servers.  

John

Date Of Receipt: 	 4-FEB-1994 13:41:24.84
From: 	WASTED::sjlee "S.J. Lee USG  04-Feb-1994 1340"
To: 	odehelp@wasted:zko.dec
CC: 	
Subj: 	kerberos

marx.sjlee> kinit SJ_Lee
MIT Project Athena (marx)
Kerberos Initialization for "SJ_Lee"
kinit: Can't send request (send_to_kdc)

what is the problem?

Date Of Receipt: 	 4-FEB-1994 14:27:45.14
From: 	ALPHA::"jmf@zk3.dec.com" "Joshua M. Friedman ULTRIX SDE"
To: 	sjlee@zk3.dec.com
CC: 	odehelp@zk3.dec.com
Subj: 	Re:  kerberos
you need to setup your workstation: 	

as root, run
/usr/sde/install/ode install

or you can manually do:
as root,
mkdir /var/dss/kerberos/tkt
chmod 777 /var/dss/kerberos/tkt
cp from a production machine /etc/krb.conf, make sure it's world readable


-josh

Date Of Receipt: 	27-JUN-1994 11:07:17.36
From: 	FLUME::"vandyck@zk3.dec.com" "Grant Van Dyck  27-Jun-1994 1105"
To: 	deleo@zk3.dec.com
CC: 	odehelp@zk3.dec.com, glidden@zk3.dec.com
Subj: 	Re: Kerberos

Cheryl,

It appears that you are on the green net (16.140.32.??).
You can get usr/sde from either wasted or nsa on your
subnet. Make an entry for one of these in your fstab and when
it's mounted, run this command (as root)

# /usr/sde/install/ode  install

Which will prompt you for some responses and then set up your system.
If you haven't configured bind for your machine, you'll need to do that
as well, since kerberos needs that to resolve the addresses of the
kerberos DB servers.


	-Grant


| Cheryl, 
| I did a quick check on your workstation and it is not
| setup properly to run kinit, you need to do one of two
| things.
| 1. Use a production system to get your tickets (wasted alpha flume gulch quar
ry)
| 2. Speak with release engineering group about how to install ode tools onto
| your workstation.
|  You can get to release eng. via mail, send to odehelp@zk3.dec.com.
| 				Mark G

Date Of Receipt: 	28-JUN-1994 16:51:45.37
From: 	US2RMC::"jmf@zk3.dec.com" "Joshua M. Friedman OSF/UNIX SDE"
To: 	deleo@wasted.zk3.dec.com, glidden@hades.zk3.dec.com, jmf@hades.zk3.dec.com
CC: 	odehelp@hades.zk3.dec.com
Subj: 	Re:  Kerberos

No problem.  Since you haven't had the need to use ode source control,
you haven't encountered many of the ins and outs.	-josh

% Received: 	from inet-gw-3.pa.dec.com by us2rmc.bb.dec.com (5.65/rmc-22feb94) id AA24876; Tue, 28 Jun 94 16:46:38 -040
	from crl.dec.com by inet-gw-3.pa.dec.com (5.65/27May94) id AA00948; Mon, 27 Jun 94 16:03:16 -070
	by crl.dec.com; id AA13093; Mon, 27 Jun 94 18:06:08 -0400
	from flambe by hades.zk3.dec.com; (5.65/1.1.8.2/27Jun94-1225PM)id AA00582; Mon, 27 Jun 1994 18:03:23 -0400
	from longbow.zk3.dec.com by flambe.zk3.dec.com; (5.65/1.1.8.2/30Mar94-0502PM)id AA12343; Mon, 27 Jun 1994 18:03:23 -0400
	by longbow.zk3.dec.com; id AA00831; Mon, 27 Jun 1994 18:03:22 -0400
% From: 	Joshua M. Friedman OSF/UNIX SDE <jmf@zk3.dec.com>
% Date: 	Mon, 27 Jun 1994 18:03:22 -0400
% Message-Id: 	<9406272203.AA00831@longbow.zk3.dec.com>
% To: 	deleo@wasted.zk3.dec.com, glidden@hades.zk3.dec.com, jmf@hades.zk3.dec.com
% Subject: 	Re:  Kerberos
% Cc: 	odehelp@hades.zk3.dec.com

Date Of Receipt: 	11-JUL-1994 09:48:37.54
From: 	QUARRY::myrdal "Gregory Myrdal USG  11-Jul-1994 0946"
To: 	glidden@DEC:.zko.quarry, account-admin@DEC:.zko.quarry
CC: 	vandyck@DEC:.zko.quarry, arw@unx.dec.com, odehelp@DEC:.zko.quarry
Subj: 	kerberos

Mark,

Can you please create a srvtab.  

Carol,

Can you please create a kerberos account.

Thanks,

-- Greg

------- Forwarded Message

Return-Path: vandyck 
Delivery-Date: Fri, 08 Jul 94 16:10:31 -0400
Return-Path: vandyck
Received: from flambe.zk3.dec.com by quarry.zk3.dec.com; 
(5.65/1.1.8.2/25Apr94-0216PM)
	id AA14435; Fri, 8 Jul 1994 16:10:31 -0400
Received: from cardinal.zk3.dec.com by flambe.zk3.dec.com; 
(5.65/1.1.8.2/30Mar94-0502PM)
	id AA20007; Fri, 8 Jul 1994 16:10:28 -0400
Received: by cardinal.zk3.dec.com; id AA24944; Fri, 8 Jul 1994 16:10:26 -0400
Message-Id: <9407082010.AA24944@cardinal.zk3.dec.com>
To: admin@flambe.zk3.dec.com
Cc: arw@unx.dec.com, odehelp
Subject: Forwarding request
Date: Fri, 08 Jul 94 16:10:26 -0400
From: Grant Van Dyck <vandyck>
X-Mts: smtp


- ------- Forwarded Message

Return-Path: arw@unx.dec.com 
Delivery-Date: Fri, 08 Jul 94 16:06:13 -0400
Return-Path: arw@unx.dec.com
Received: by cardinal.zk3.dec.com; id AA24924; Fri, 8 Jul 1994 16:06:12 -0400
Received: from drew.unx.dec.com by alpha.zk3.dec.com; 
(5.65/1.1.8.2/26May94-1024AM)
	id AA16932; Fri, 8 Jul 1994 16:01:51 -0400
Received: from localhost by drew.unx.dec.com; (5.65/1.1.8.2/05Jul94-1114AM)
	id AA15578; Fri, 8 Jul 1994 16:01:48 -0400
Message-Id: <9407082001.AA15578@drew.unx.dec.com>
To: odehelp@zk3.dec.com
Cc: arw@unx.dec.com
Subject: Request for svrtab file for new shared sandbox   
Date: Fri, 08 Jul 94 16:01:48 -0400
From: "Andrew R. Weakley" <arw@unx.dec.com>
X-Mts: smtp


Hello,

I am setting up a new shared sandbox at UNX on brandy.unx.dec.com.
According to the installation instructions I need a srvtab file generated.
Can you help me with this?  If so, can you send me mail telling me where
I can pick this up?  I'd like to work on the install over the weekend if
possible (sorry for the short notice).

Also, don't I need a Kerberos account created for the sandbox admin?

Here is all the information listed in the guide which is needed to register
a shared sandbox.  I hope it's all you need to do the above.

Shared sandbox admin:	Andrew Weakley  arw@unx.dec.com
Set name:		STDSBLD
Principal name:		stdsbld_unx
username:		stdsbld
server system:		brandy
ODE tools server:	odie


Thanks for the support,
Andy

- ------- End of Forwarded Message



------- End of Forwarded Message

Date Of Receipt: 	14-SEP-1994 15:50:52.86
From: 	ALPHA::glidden "Mark Glidden USG  14-Sep-1994 1548"
To: 	talman@namlat.zk3.dec.com
CC: 	glidden@DEC:.zko.alpha, ftw@DEC:.zko.alpha, odehelp@DEC:.zko.alpha
Subj: 	Re: kerberos problem

I am aware of this and spoke to Farrell again today,
This problem will be passed on to DECWET as I have spent
several hours trying to debug this error with no success.

				Mark G

Date Of Receipt: 	14-SEP-1994 16:06:20.32
From: 	ALPHA::"ftw@minsrv.zk3.dec.com" "14-Sep-1994 1604"
To: 	glidden@alpha.zk3.dec.com
CC: 	talman@namlat.zk3.dec.com, odehelp@alpha.zk3.dec.com
Subj: 	Re: kerberos problem

> I am aware of this and spoke to Farrell again today,

Just a small note: the recurring problem I have w/kerberos and multiple NI's
is different than the hiccup which occurred earlier today.  The latter seemed
to be a problem for multiple people and not just myself.  However either
someone fixed it, or the problem "went away."

Just want to avoid confusion...

Thanks for the help!


	-- Farrell

Date Of Receipt: 	11-OCT-1994 16:56:33.80
From: 	WASTED::chs "Carol Hackett Sheridan USG  11-Oct-1994 1653"
To: 	davidson@DEC:.zko.wasted
CC: 	chs@DEC:.zko.wasted, admin@DEC:.zko.wasted, odehelp@DEC:.zko.wasted,
	mike@DEC:.zko.wasted
Subj: 	Re: kerberos

Thanks!

------- Forwarded Message

Return-Path: davidson@sean.zk3.dec.com
Received: from sean.zk3.dec.com by wasted.zk3.dec.com; 
(5.65/1.1.8.2/01Sep94-0829AM)
	id AA22802; Tue, 11 Oct 1994 16:43:45 -0400
Received: by sean.zk3.dec.com; (5.65/1.1.8.2/02Sep94-0706PM)
	id AA19129; Tue, 11 Oct 1994 16:43:16 -0400
Date: Tue, 11 Oct 1994 16:43:16 -0400
From: D. Sean Davidson <davidson@sean.zk3.dec.com>
Message-Id: <9410112043.AA19129@sean.zk3.dec.com>
To: chs@sean.zk3.dec.com
Subject: Re:  

This system is fixed now.  You can kinit now.

Sean

------- End of Forwarded Message

Date Of Receipt: 	 2-JAN-1996 11:38:58.94
From: 	SMURF::WASTED::chs "Carol Hackett Sheridan USG  02-Jan-1996 1136"
To: 	odehelp@DEC:.zko.wasted
CC: 	chs@DEC:.zko.wasted
Subj: 	Kerberos problem

Hi,

I just upgraded my workstation to V3.2C.

I'm now getting the following message when I do a kinit:

norton.zk3.dec.com> kinit $PRINCIPAL
Kerberos Initialization for "Carol_Sheridan"
kinit: Principal unknown (kerberos)

Is there some setup that I forgot to do?

I've edited /etc/passwd and /etc/group to add the users devrcs and devbld
to the groups 'devode' and 'staff'.

Everything else seems to be working with my ODE setup except this.

Can you give me a pointer to where the problem might be?

Thanks,

Carol Sheridan

Date Of Receipt: 	 2-JAN-1996 11:53:41.38
From: 	SMURF::FLUME::johnf "John Flanagan USG Test Johnf Tools Group  02-Jan-1996 1151"
To: 	chs@DEC:.zko.flume
CC: 	odehelp@DEC:.zko.flume
Subj: 	Re: Kerberos problem

make sure that you have a valid /etc/krb.conf file.

It should look like this:

ZONE
ZONE    kerberos.zk3.dec.com
ZONE    kerberos1.zk3.dec.com
ZONE    kerberos2.zk3.dec.com
ZONE    kerberos3.zk3.dec.com
ZONE    kerberos4.zk3.dec.com
ZONE    kerberos.zk3.dec.com
ZONE    kerberos.zk3.dec.com    admin   dummy



 ______________________________________________________________________

 John Flanagan	 		enet:    johnf@zk3.dec.com	
 MS: ZKO3-3/W20			decnet:  flume::johnf
 USG Release Engineering		 (603) 881-1719
 110 Spitbrook Road 			 (DTN) 381-1719
 Nashua, NH  
 ______________________________________________________________________

Date Of Receipt: 	 2-JAN-1996 12:12:42.37
From: 	SMURF::WASTED::"vandyck@cardinal.zk3.dec.com"
To: 	chs@zk3.dec.com (chs)
CC: 	odehelp@zk3.dec.com, chs@zk3.dec.com
Subj: 	Re: Kerberos problem

If John's tip didn't get you working, try running (as root)
/usr/sde/install/ode install   - just to make sure everything is setup OK.


> 
> 
> Hi,
> 
> I just upgraded my workstation to V3.2C.
> 
> I'm now getting the following message when I do a kinit:
> 
> norton.zk3.dec.com> kinit $PRINCIPAL
> Kerberos Initialization for "Carol_Sheridan"
> kinit: Principal unknown (kerberos)
> 
> Is there some setup that I forgot to do?
> 
> I've edited /etc/passwd and /etc/group to add the users devrcs and devbld
> to the groups 'devode' and 'staff'.
> 
> Everything else seems to be working with my ODE setup except this.
> 
> Can you give me a pointer to where the problem might be?
> 
> Thanks,
> 
> Carol Sheridan
> 
> 


-- 

				-Grant

Date Of Receipt: 	 2-JAN-1996 14:25:28.86
From: 	SMURF::WASTED::chs "Carol Hackett Sheridan USG  02-Jan-1996 1423"
To: 	John Flanagan - UNIX Systems Group <johnf@DEC:.zko.wasted>
CC: 	chs@DEC:.zko.wasted, odehelp@DEC:.zko.wasted, glidden@DEC:.zko.wasted,
	vandyck@DEC:.zko.wasted
Subj: 	Re: Kerberos problem

It's working. You were right, it was my /etc/krb.conf file. Once I copied 
it from wasted, 'kinit' worked properly.

Thanks for the help,

Carol