[H-GEN] Kerberos advances

[Sarah Kelly]

[ Humbug *General* list - semi-serious discussions about Humbug and  ]
[ Unix-related topics.  Please observe the list's charter.           ]
[ Worthwhile understanding: http://www.humbug.org.au/netiquette.html ]

On Tue, Jan 15, 2002 at 12:28:37PM +1000, Robert Brockway wrote:
> [ Humbug *General* list - semi-serious discussions about Humbug and  ]
> [ Unix-related topics.  Please observe the list's charter.           ]
> [ Worthwhile understanding: http://www.humbug.org.au/netiquette.html ]
> 
> On Tue, 15 Jan 2002, Sarah Kelly wrote:
> 
> > [ Humbug *General* list - semi-serious discussions about Humbug and  ]
> > [ Unix-related topics.  Please observe the list's charter.           ]
> > [ Worthwhile understanding: http://www.humbug.org.au/netiquette.html ]
> > 
> > Hi all,
> > 
> > Okay, things are looking up now. Kerberos works, mostly. Turns out that
> > we needed to make changes to /etc/services, which we actually had set in 
> > a NIS+ table rather than the file. We're still getting some complaints
> > about an RPC not being registered yet, and some programs are having trouble
> > as a result, but it's a lot smoother.
> > 
> > How can I find out what RPCs are registered, and how do I register an RPC?
> 
> Believe it or not, it is my understanding that a reboot is required to fix
> some RPC registration problems under Solaris.  I read this somewhere deep
> in the doco.  It basically says something like "don't be starting &
> stopping RPC services out of order, reboot instead".  This is all from
> memory so if anyone could provide more specific advice for Sarah I think
> that would be narly.
> 
> James of the Sun Microsystems, do you have any comments on this RPC
> issue?

kerbd is not running on this system. According to the manpages:

NAME
     kerbd - generates and validates Kerberos tickets for  kernel
     RPC

SYNOPSIS
     /usr/sbin/kerbd [ -dg ]

DESCRIPTION
     kerbd is the usermode daemon which interfaces between kernel
     RPC  and  the Kerberos key distribution center (KDC) for the
     purposes of generating and validating  Kerberos  authentica-
     tion  tickets.  In  addition, kerbd maps Kerberos user names
     into local user and group ids. By default, all  groups  that
     the  requested  user  belongs  to  will  be  included in the
     grouplist credential. kerbd is  automatically  started  when
     the system enters the multi-user state.
...

 Availability                | SUNWcsu                   

Now, not only is kerbd not running, but I can't find it anywhere
on the system, including in the SUNWcsu package. I'm thinking that
this could have something to do with my current problems. 

Help!
-- 
Ms Sarah Kelly						sarah at uow.edu.au
Information Technology Services				Bld 17 Level 2
The University of Wollongong				Ph: +61 2 4221 3775

--
* This is list (humbug) general handled by majordomo at lists.humbug.org.au .
* Postings to this list are only accepted from subscribed addresses of
* lists 'general' or 'general-post'.