Re: kadmind (1.5.2) not respecting --keytab parameter

Viktor Dukhovni <[email protected]> Sat, 25 Mar 2017 20:52:03 -0400

Newsgroups	gmane.comp.encryption.kerberos.heimdal.general
Message-ID	<[email protected]>

> On Mar 25, 2017, at 7:38 PM, Adam Lewenberg <[email protected]> wrote:
> 
> /usr/lib/heimdal-servers/kadmind --keytab=/etc/heimdal-kdc/kadmin.keytab --config-file=/etc/heimdal-kdc/kdc.conf --debug
> 
> When I run a kadmin command from another server this is the error that shows up in the logs:
> 
> 017-03-25T16:31:13.895643-07:00 kerberos-qa1 kadmind[1667]: Miscellaneous failure (see text)
> 2017-03-25T16:31:13.895733-07:00 kerberos-qa1 kadmind[1667]: Failed to find kadmin/[email protected](kvno 1) in keytab FILE:/etc/krb5.keytab (aes256-cts-hmac-sha1-96)
> 2017-03-25T16:31:13.895932-07:00 kerberos-qa1 kadmind[1667]: gss error, exit
> 
> Why is kadmind looking at /etc/krb5.keytab when I specified the keytab file with the --keytab parameter?

[ I've not checked the 1.5 code. ]

Have you tried reversing the order of the options?

-- 
	Viktor.