0

I have been having issues with ApacheDS' Kerberos server recently, and have been unable to, despite my best efforts, figure it out.

I fixed an issue before where keys weren't being generated properly, and now that works, but instead I am getting a new error:

Client Trace

[17073] 1583719896.486179: Received error from KDC: -1765328377/Server not found in Kerberos database
kinit: Server not found in Kerberos database while getting initial credentials

Server Logs

[2020-07-08T20:07:46.046-0600] ERROR [org.apache.directory.server.KERBEROS_LOG] - No timestamp found
[2020-07-08T20:07:46.046-0600] WARN [org.apache.directory.server.kerberos.protocol.KerberosProtocolHandler] - Additional pre-authentication required (25)
[2020-07-08T20:07:46.046-0600] WARN [org.apache.directory.server.KERBEROS_LOG] - Additional pre-authentication required (25)
[2020-07-08T20:07:46.046-0600] WARN [org.apache.directory.server.protocol.shared.kerberos.StoreUtils] - No server entry found for kerberos principal name krbtgt/REALM@REALM
[2020-07-08T20:07:46.046-0600] WARN [org.apache.directory.server.KERBEROS_LOG] - No server entry found for kerberos principal name krbtgt/REALM@REALM
[2020-07-08T20:07:46.046-0600] WARN [org.apache.directory.server.kerberos.protocol.KerberosProtocolHandler] - Server not found in Kerberos database (7)
[2020-07-08T20:07:46.046-0600] WARN [org.apache.directory.server.KERBEROS_LOG] - Server not found in Kerberos database (7)

I've redacted the realm name, but otherwise it is exactly as output by the server.

Curiously, it is just this one aspect of ApacheDS which is having problems, the LDAP server works fine.

  • I didn't even know ApacheDS has a KDC built in, but if you're missing an entry for the TGS itself, this seems like "your realm is toast, rebuild it from scratch" kind of an error... Does ApacheDS store principals as LDAP entries, and if so, can you check whether an entry for krbtgt/REALM actually exists in the database or not? – user1686 Mar 9 at 6:00

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.