Shulou(Shulou.com)06/03 Report--

Suddenly one day after starting the kadmind and kdc processes of kerberos as usual, I found that everything was normal, but the database management kadmin was no longer connected. The error is as follows

My kerberos starts two domains, HZ.DATA.COM and NETEASE.COM. Notice the information in the log

Cannot decrypt ticket for kadmin/master@HZ.DATA.COM using keytab key for kadmin/changepw@NETEASE.COM

Why use NETEASE.COM 's domain to parse HZ.DATA.COM 's ticket?

Reason:

My configuration file sets NETEASE.COM as the default domain, which is what it looks like when it starts

Kadmind-r HZ.DATA.COM-r NETEASE.COM

Giant pit, the default domain should be put in front? Kadmind-r NETEASE.COM-r HZ.DATA.COM, that's fine.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.