Sample Header Ad - 728x90

How to kerberize services on Mac bound to Kerberos KDC on Linux?

0 votes
1 answer
294 views
I'm trying to kerberize services on an iMac that is bound to an external Kerberos KDC on a Linux computer. I assume that I have to use sso_util and do it like this: sso_util configure -v 7 -r EXAMPLE.COM -f /LDAPv3/kdc.example.com -a diradmin/admin all where EXAMPLE.COM is the name of the realm and kdc.example.com is the Linux computer which hosts LDAP and Kerberos. I get the following error message:
GetRealmFromDir: looking up the realm name in the KerberosKDC config record in node
/LDAPv3/ldap.keps.de
GetRealmFromDir: Couldn't get attributes of kerberoskdc record
GetRealmFromDir: didn't find a KerberosKDC record, looking in the KerberosClient record
GetConfigFromDir: failed to find the KerberosClient config record in the directory error = 4101
GetRealmFromDir: didn't find a KerberosClient record either, returning NULL
GetRealmFromDir: realm is :(null)
Invalid Realm Name
It looks like I must put some configuration data in the LDAP database but what data according to what schema?
Asked by blaschep (1 rep)
Jun 7, 2020, 07:54 PM
Last activity: Nov 4, 2020, 09:00 PM