[Top][All Lists]

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Permission denied when checking out from kerberos client

From: Mark D. Baushke
Subject: Re: Permission denied when checking out from kerberos client
Date: Sat, 26 May 2007 10:31:05 -0700

Hash: SHA1

Hi Nick,

If you are trying to specify a local username of, then you
may need to patch your cvs sources to properly handle this.

There is a patch here:
for both cvs 1.11.x and cvs 1.12.x which may be able to help you
upgrade your client and server versions of CVS to do what you want.

At present, the part is not being used at all and so you are
stuck with just a cvs/cvs2 as the name it is trying to validate.

In addition, the lack of being able to find a KDC for the realm suggests
that there may be a problem on cvs2 with locating the KDC realm. You may
need to use a fully qualified domain name for cvs2. It appears to be
using the loopback address and unless you are using a host which is
running its own KDC, that will not lead to good things.

        Good luck,
        -- Mark

Nick Wales <address@hidden> writes:

> Still having issues with this...
> Now trying to run the gserver command from the local machine and getting 
> a more obvious error.
> This is from the client end.... the KDC is definitely available, as I 
> have just got a kerberos ticket using kinit. klist shows that the ticket 
> is valid.
> > address@hidden gservertest]$ cvs -d 
> > :gserver:address@hidden:/var/cvs checkout test
> > cvs checkout: GSSAPI authentication failed: Unspecified GSS failure.  
> > Minor code may provide more information
> > cvs [checkout aborted]: GSSAPI authentication failed: Cannot find KDC 
> > for requested realm
> The syslog shows this error.....
> > May 16 17:06:22 cvs xinetd[3251]: START: cvspserver pid=4051 
> > from=
> > May 16 17:06:22 cvs xinetd[3251]: EXIT: cvspserver signal=13 pid=4051 
> > duration=0(sec)
> Any ideas?
> Nick
Version: GnuPG v1.4.6 (FreeBSD)


reply via email to

[Prev in Thread] Current Thread [Next in Thread]