1

I have created a KERBEROS.TEST realm on my Ubuntu 14.10 virtual machine and after addprinc root/admin also I added my client machine as principal.

I checked kinit and with sudo klist command I received the ticket on my kerberos server, but from my client machine, I receive this message: Cannot contact any realm 'KERBEROS.TEST' while getting initial credentials

What I'm doing wrong?

1
  • I'm sorry this was caught so late, but this should have been asked on ServerFault or SuperUser.
    – schroeder
    Nov 7 '16 at 19:39
2

"Cannot contact any realm 'KERBEROS.TEST' while getting initial credentials"

Your client needs to contact a KDC for the KERBEROS.TEST relam. It was either unable to find a KDC, or unable to contact a KDC.

To find what you're doing wrong, you'll need to investigate and eliminate various scenarios.

  1. Do you have a config file (/etc/krb5.conf) that names the realm?
  2. Can your client find the domain name of the KDC ?
    • The client could find KDCs in the [realms] section of the krb5.conf
    • The client could find KDCs through DNS using SRV records.
  3. Can the client connect to the KDC ?

If your client knows the realm, the problem is probably in step #2 or step #3.

If you are using MIT Kerberos, here are links to documentation that may help:

1
  • Thanks for KRB5_TRACE hint
    – Paul Lysak
    May 20 '20 at 13:38

Not the answer you're looking for? Browse other questions tagged or ask your own question.